Rapture, a Ransomware Family With Similarities to Paradise
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Hardware - T1592.001 Javascript - T1059.007 Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Sharepoint - T1213.002 Software - T1592.002 Vulnerabilities - T1588.006 Powershell - T1086 Windows Management Instrumentation - T1047
Show in Graph
Common Information
Type Value
UUID 46e1b1d7-1663-4fbe-89c2-2cf36b11c27f
Fingerprint a663855a8017979f
Analysis status DONE
Considered CTI value 0
Text language
Published April 28, 2023, midnight
Added to db Oct. 15, 2024, 9:57 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Rapture, a Ransomware Family With Similarities to Paradise
Title Rapture, a Ransomware Family With Similarities to Paradise
Detected Hints/Tags/Attributes 52/2/9
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_my/research/23/d/rapture-a-ransomware-family-with-similarities-to-paradise.html
Details Source https://www.trendmicro.com/en_nz/research/23/d/rapture-a-ransomware-family-with-similarities-to-paradise.html
Details Source https://www.trendmicro.com/en_in/research/23/d/rapture-a-ransomware-family-with-similarities-to-paradise.html
Details Source https://www.trendmicro.com/en_sg/research/23/d/rapture-a-ransomware-family-with-similarities-to-paradise.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details File 3 
e:\its.log
Details File 3 
aps.log
Details File 3 
7qzxid-readme.txt
Details File 3 
qisgqu-readme.txt
Details File 128 
w3wp.exe
Details File 4 
pickers.aspx
Details File 1260 
explorer.exe
Details File 1122 
svchost.exe
Details IPv4 3 
195.123.234.101