Black Basta Ransomware and Threat Group
Tags
cmtmf-attack-pattern: Process Injection
country: Australia Canada Japan New Zealand Russia United Kingdom United States Of America
attack-pattern: Data Model Local Data Staging - T1074.001 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Process Injection - T1631 Regsvr32 - T1218.010 Remote Desktop Protocol - T1021.001 Rundll32 - T1218.011 Scheduled Task - T1053.005 Software - T1592.002 Tool - T1588.002 Connection Proxy - T1090 Powershell - T1086 Process Injection - T1055 Regsvr32 - T1117 Remote Desktop Protocol - T1076 Rundll32 - T1085 Scheduled Task - T1053 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID 0d2bcde5-6d64-4bb4-aca2-9c2b98e18466
Fingerprint b6510c51ef3b1cd9
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 12, 2024, midnight
Added to db Aug. 31, 2024, 1:13 a.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Black Basta Ransomware and Threat Group
Title Black Basta Ransomware and Threat Group
Detected Hints/Tags/Attributes 59/3/4
Source URLs
Redirection Url
Details Source https://intel471.com/blog/black-basta-ransomware-and-threat-group
URL Provider
Details Provider Source level domain
Details intel471.com intel471.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 138 ✔ Intel471 https://intel471.com/blog/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 25 
esentutl.exe
Details File 53 
adfind.exe
Details File 312 
calc.exe
Details File 459 
regsvr32.exe