MITRE ATT&CKsoftware (malware)

S1181 BlackByte 2.0 Ransomware

Published 2024-12-17 Modified 2026-05-12 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-12-17

Description

BlackByte 2.0 Ransomware is a replacement for BlackByte Ransomware. Unlike BlackByte Ransomware, BlackByte 2.0 Ransomware does not have a common key for victim decryption. BlackByte 2.0 Ransomware remains uniquely associated with BlackByte operations.

Related

Uses · MITRE ATT&CK (11)

  • T1686.003 Windows Host Firewall sub-technique
  • T1569.002 Service Execution sub-technique
  • T1070.004 File Deletion sub-technique
  • T1070.006 Timestomp sub-technique
  • T1490 Inhibit System Recovery technique
  • T1489 Service Stop technique
  • T1486 Data Encrypted for Impact technique
  • T1135 Network Share Discovery technique
  • T1055 Process Injection technique
  • T1068 Exploitation for Privilege Escalation technique
  • T1112 Modify Registry technique

Referenced by MITRE ATT&CK · uses (1)

References