Adversary Dossier: Ryuk Ransomware Anatomy of an Attack in 2021
Tags
country: Iran Israel
maec-delivery-vectors: Watering Hole
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Password Spraying - T1110.003 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Software - T1592.002 Tool - T1588.002 Logon Scripts - T1037 Brute Force - T1110 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 14a03494-cd15-4f90-9350-03063b73c02f
Fingerprint bcf080959253a5c3
Analysis status DONE
Considered CTI value 1
Text language
Published April 16, 2021, 2:05 p.m.
Added to db Feb. 17, 2023, 11:24 p.m.
Last updated Oct. 15, 2024, 1:49 a.m.
Headline Adversary Dossier: Ryuk Ransomware Anatomy of an Attack in 2021
Title Adversary Dossier: Ryuk Ransomware Anatomy of an Attack in 2021
Detected Hints/Tags/Attributes 89/3/4
Source URLs
Redirection Url
Details Source https://www.advanced-intel.com/post/adversary-dossier-ryuk-ransomware-anatomy-of-an-attack-in-2021
Details Source https://www.advintel.io/post/adversary-dossier-ryuk-ransomware-anatomy-of-an-attack-in-2021
URL Provider
Details Provider Source level domain
Details advanced-intel.com www.advanced-intel.com
Details advintel.io www.advintel.io
Attributes
Details Type #Events CTI Value
Details CVE 49 
cve-2018-8453
Details CVE 19 
cve-2019-1069
Details File 3 
keethief.ps1
Details File 1 
win23k.sys