MITRE ATT&CKsoftware (malware)
S1139 INC Ransomware
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2024-06-06
Description
INC Ransomware is a ransomware strain that has been used by the INC Ransom group since at least 2023 against multiple industry sectors worldwide. INC Ransomware can employ partial encryption combined with multi-threading to speed encryption.
Related
Uses · MITRE ATT&CK (15)
- T1680 Local Storage Discovery technique
- T1652 Device Driver Discovery technique
- T1570 Lateral Tool Transfer technique
- T1566 Phishing technique
- T1491.001 Internal Defacement sub-technique
- T1490 Inhibit System Recovery technique
- T1489 Service Stop technique
- T1486 Data Encrypted for Impact technique
- T1135 Network Share Discovery technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1047 Windows Management Instrumentation technique
- T1057 Process Discovery technique
- T1083 File and Directory Discovery technique
- T1106 Native API technique
- T1120 Peripheral Device Discovery technique
Referenced by MITRE ATT&CK · uses (1)
- G1032 INC Ransom group
References
- https://www.secureworks.com/blog/gold-ionic-deploys-inc-ransomware Secureworks GOLD IONIC April 2024
- https://www.sentinelone.com/anthology/inc-ransom/ SentinelOne INC Ransomware
- https://www.huntress.com/blog/investigating-new-inc-ransom-group-activity Huntress INC Ransom Group August 2023