Embargo Ransomware Actors Abuses Safe Mode To Disable Security Solutions | #ransomware | #cybercrime | National Cyber Security Consulting
Common Information
Type Value
UUID 011890ce-45f4-4380-9a96-b28ce50608a9
Fingerprint 9e954971b82faf94
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 24, 2024, 1:09 p.m.
Added to db Oct. 24, 2024, 3:58 p.m.
Last updated Nov. 5, 2024, 8:50 a.m.
Headline Embargo Ransomware Actors Abuses Safe Mode To Disable Security Solutions | #ransomware | #cybercrime
Title Embargo Ransomware Actors Abuses Safe Mode To Disable Security Solutions | #ransomware | #cybercrime | National Cyber Security Consulting
Detected Hints/Tags/Attributes 27/1/6
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 6 National Cyber Security Consulting http://nationalcybersecurity.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 5
probmon.sys
Details File 11
how_to_recover_files.txt
Details File 2
c:\windows\system32\drivers\sysprox.sys
Details File 2
c:\windows\sysmon64.sys
Details IPv4 27
3.0.0.4
Details Windows Registry Key 3
HKLM\SYSTEM\ControlSet001\services