Ransomware Attackers Use Microsoft-Signed Drivers to Gain Access to Systems
Tags
country: China Cuba
attack-pattern: Code Signing - T1553.002 Code Signing Certificates - T1587.002 Code Signing Certificates - T1588.003 Digital Certificates - T1596.003 Digital Certificates - T1587.003 Digital Certificates - T1588.004 Hardware - T1592.001 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Code Signing - T1116 Rootkit - T1014 Rootkit
Show in Graph
Common Information
Type Value
UUID 20082f5d-fd63-41da-ab98-e44a78136b4f
Fingerprint a5fc999551a69507
Analysis status DONE
Considered CTI value 1
Text language
Published Dec. 14, 2022, 6:38 p.m.
Added to db Dec. 14, 2022, 4:10 p.m.
Last updated Nov. 15, 2024, 9:30 p.m.
Headline Ransomware Attackers Use Microsoft-Signed Drivers to Gain Access to Systems
Title Ransomware Attackers Use Microsoft-Signed Drivers to Gain Access to Systems
Detected Hints/Tags/Attributes 50/2/2
Source URLs
Redirection Url
Details Source https://thehackernews.com/2022/12/ransomware-attackers-use-microsoft.html
URL Provider
Details Provider Source level domain
Details thehackernews.com thehackernews.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 163 ✔ — https://media.cert.europa.eu/rss?type=category&id=Malware&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 7 
driversipolicy.p7b
Details Mandiant Uncategorized Groups 111 
UNC3944