How Lockergoga took down Hydro — ransomware used in targeted attacks aimed at big business
Tags
country: Norway
attack-pattern: Data Technical Blogs Artificial Intelligence - T1588.007 Dns - T1071.004 Dns - T1590.002 Group Policy Preferences - T1552.006 Local Accounts - T1078.003 Malware - T1587.001 Malware - T1588.001 Pass The Hash - T1550.002 Powershell - T1059.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Software - T1592.002 System Services - T1569 Tool - T1588.002 Pass The Hash - T1075 Powershell - T1086 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID 61e09c0b-5784-48b5-ba95-d9365b2c79ee
Fingerprint 270188598a3fb7ce
Analysis status DONE
Considered CTI value 0
Text language
Published April 18, 2019, 12:43 p.m.
Added to db Sept. 26, 2022, 9:31 a.m.
Last updated Nov. 7, 2024, 12:55 p.m.
Headline How Lockergoga took down Hydro — ransomware used in targeted attacks aimed at big business
Title How Lockergoga took down Hydro — ransomware used in targeted attacks aimed at big business
Detected Hints/Tags/Attributes 96/2/3
Source URLs
Redirection Url
Details Source https://doublepulsar.com/how-lockergoga-took-down-hydro-ransomware-used-in-targeted-attacks-aimed-at-big-business-c666551f5880
URL Provider
Details Provider Source level domain
Details doublepulsar.com doublepulsar.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
hydro.com
Details File 76 
netsh.exe
Details File 3 
logoff.exe