Intel471 | How Groove Gang is shaking up the Ransomware-as-a-Service…
Tags
cmtmf-attack-pattern: Command And Scripting Interpreter Exploit Public-Facing Application
country: Germany Italy Thailand Russia
attack-pattern: Data Direct Model Botnet - T1583.005 Botnet - T1584.005 Command And Scripting Interpreter - T1623 Credentials - T1589.001 Data Encrypted For Impact - T1471 Data Encrypted For Impact - T1486 Domain Accounts - T1078.002 Domain Trust Discovery - T1482 Exfiltration Over Web Service - T1567 Exploitation Of Remote Services - T1428 Exploit Public-Facing Application - T1377 Exploits - T1587.004 Exploits - T1588.005 Impair Defenses - T1562 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Smb/Windows Admin Shares - T1021.002 Transfer Data To Cloud Account - T1537 Account Discovery - T1087 Command-Line Interface - T1059 Credential Dumping - T1003 Exploit Public-Facing Application - T1190 Exploitation Of Remote Services - T1210 Remote Services - T1021 Valid Accounts - T1078 Exploit Public-Facing Application Exploitation Of Remote Services Valid Accounts
Show in Graph
Common Information
Type Value
UUID 59a1a0c8-039e-48b2-853b-c607766f0f59
Fingerprint b652888708a4a647
Analysis status DONE
Considered CTI value 2
Text language
Published Jan. 28, 2023, midnight
Added to db Aug. 31, 2024, 5:02 a.m.
Last updated Nov. 17, 2024, 6:56 p.m.
Headline How Groove Gang is shaking up the Ransomware-as-a-Service market to empower affiliates
Title Intel471 | How Groove Gang is shaking up the Ransomware-as-a-Service…
Detected Hints/Tags/Attributes 125/3/14
Source URLs
Redirection Url
Details Source https://intel471.com/blog/groove-gang-ransomware-babuk-revil-blackmatter
URL Provider
Details Provider Source level domain
Details intel471.com intel471.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 138 ✔ Intel471 https://intel471.com/blog/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 126 
cve-2017-0144
Details File 44 
payload.bin
Details MITRE ATT&CK Techniques 542 
T1190
Details MITRE ATT&CK Techniques 289 
T1003
Details MITRE ATT&CK Techniques 71 
T1078.002
Details MITRE ATT&CK Techniques 695 
T1059
Details MITRE ATT&CK Techniques 159 
T1021
Details MITRE ATT&CK Techniques 109 
T1210
Details MITRE ATT&CK Techniques 179 
T1087
Details MITRE ATT&CK Techniques 124 
T1482
Details MITRE ATT&CK Techniques 235 
T1562
Details MITRE ATT&CK Techniques 33 
T1537
Details MITRE ATT&CK Techniques 126 
T1567
Details MITRE ATT&CK Techniques 472 
T1486