badrabbit

Resubmissions

17/12/2021, 10:23

211217-meszeaecbk8

17/12/2021, 10:17

211217-mbj74adea210

Sharing

Copy URL Twitter E-mail

General

Target
https://youtube.com
Sample211217-mbj74adea2

Score

10^/10

Malware Config

Targets

- Target
  https://youtube.com
Score

10^/10

badrabbit mimikatz ransomware
- BadRabbit
  Ransomware family discovered in late 2017, mainly targeting Russia and Ukraine.
  ransomware badrabbit
- Mimikatz
  mimikatz is an open source tool to dump credentials on Windows.
  mimikatz
- mimikatz is an open source tool to dump credentials on Windows
- Executes dropped EXE
- Modifies extensions of user files
  Ransomware generally changes the extension on encrypted files.
  ransomware
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

T1053

Persistence

Scheduled Task

T1053

Privilege Escalation

Scheduled Task

T1053

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Mimikatz

mimikatz is an open source tool to dump credentials on Windows

Executes dropped EXE

Modifies extensions of user files

MITRE ATT&CK Enterprise v6

Tasks

static1

urlscan1

behavioral1