MITRE ATT&CKsoftware (malware)

S1150 ROADSWEEP

Published 2024-08-08 Modified 2024-08-09 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-08-08

Description

ROADSWEEP is a ransomware that was deployed against Albanian government networks during HomeLand Justice along with the CHIMNEYSWEEP backdoor.

Related

Uses · MITRE ATT&CK (15)

  • T1680 Local Storage Discovery technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1491.001 Internal Defacement sub-technique
  • T1559 Inter-Process Communication technique
  • T1553.002 Code Signing sub-technique
  • T1070.004 File Deletion sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1490 Inhibit System Recovery technique
  • T1489 Service Stop technique
  • T1486 Data Encrypted for Impact technique
  • T1480 Execution Guardrails technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1083 File and Directory Discovery technique
  • T1120 Peripheral Device Discovery technique

Referenced by MITRE ATT&CK · uses (1)

  • C0038 HomeLand Justice campaign

References