MITRE ATT&CKsoftware (malware)

S1180 BlackByte Ransomware

Published 2024-12-17 Modified 2024-12-17 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-12-17

Description

BlackByte Ransomware is uniquely associated with BlackByte operations. BlackByte Ransomware used a common key for infections, allowing for the creation of a universal decryptor. BlackByte Ransomware was replaced in BlackByte operations by BlackByte 2.0 Ransomware by 2023.

Related

Uses · MITRE ATT&CK (21)

  • T1685 Disable or Modify Tools technique
  • T1689 Downgrade Attack technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1614.001 System Language Discovery sub-technique
  • T1059.007 JavaScript sub-technique
  • T1570 Lateral Tool Transfer technique
  • T1497.001 System Checks sub-technique
  • T1518.001 Security Software Discovery sub-technique
  • T1021.002 SMB/Windows Admin Shares sub-technique
  • T1222.001 Windows Permissions sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1490 Inhibit System Recovery technique
  • T1486 Data Encrypted for Impact technique
  • T1480 Execution Guardrails technique
  • T1135 Network Share Discovery technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1012 Query Registry technique
  • T1046 Network Service Discovery technique
  • T1082 System Information Discovery technique
  • T1106 Native API technique
  • T1112 Modify Registry technique

Referenced by MITRE ATT&CK · uses (1)

References