MITRE ATT&CKsoftware (malware)

S1096 Cheerscrypt

Published 2023-12-18 Modified 2025-04-15 Official page ↗
Domain
enterprise
Platforms
Windows, ESXi
Version
1.1
Created
2023-12-18

Description

Cheerscrypt is a ransomware that was developed by Cinnamon Tempest and has been used in attacks against ESXi and Windows environments since at least 2022. Cheerscrypt was derived from the leaked Babuk source code and has infrastructure overlaps with deployments of Night Sky ransomware, which was also derived from Babuk.

Related

Uses · MITRE ATT&CK (5)

  • T1673 Virtual Machine Discovery technique
  • T1059.012 Hypervisor CLI sub-technique
  • T1489 Service Stop technique
  • T1486 Data Encrypted for Impact technique
  • T1083 File and Directory Discovery technique

Referenced by MITRE ATT&CK · uses (1)

  • G1021 Cinnamon Tempest group

References