Groove VS Babuk; Groove Ransom Manifesto & RAMP Underground Platform Secret Inner Workings
Tags
country: Netherlands Germany
attack-pattern: Data Direct Clear Windows Event Logs - T1070.001 Credentials - T1589.001 Data Encrypted For Impact - T1471 Data Encrypted For Impact - T1486 Disable Or Modify Tools - T1562.001 Disable Or Modify Tools - T1629.003 Exfiltration Over C2 Channel - T1646 Impair Defenses - T1562 Impair Defenses - T1629 Indicator Removal On Host - T1630 Inhibit System Recovery - T1490 Server - T1583.004 Server - T1584.004 Service Stop - T1489 Social Media - T1593.001 Software - T1592.002 Vulnerabilities - T1588.006 Exfiltration Over Command And Control Channel - T1041 Indicator Removal On Host - T1070 Indicator Removal On Host Service Stop
Show in Graph
Common Information
Type Value
UUID 684e79b1-c829-4e00-a1b0-235e4b0d2b1f
Fingerprint a65108991283f45f
Analysis status DONE
Considered CTI value 2
Text language
Published Sept. 8, 2021, 5:30 p.m.
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 17, 2024, 6:56 p.m.
Headline Groove VS Babuk; Groove Ransom Manifesto & RAMP Underground Platform Secret Inner Workings
Title Groove VS Babuk; Groove Ransom Manifesto & RAMP Underground Platform Secret Inner Workings
Detected Hints/Tags/Attributes 71/2/14
Source URLs
Redirection Url
Details Source https://www.advintel.io/post/groove-vs-babuk-groove-ransom-manifesto-ramp-underground-platform-secret-inner-workings
URL Provider
Details Provider Source level domain
Details advintel.io www.advintel.io
Attributes
Details Type #Events CTI Value
Details CVE 197 
cve-2019-0708
Details CVE 126 
cve-2021-27065
Details CVE 90 
cve-2021-26857
Details CVE 63 
cve-2020-0796
Details CVE 128 
cve-2019-11510
Details CVE 4 
cve-2020-0829
Details CVE 52 
cve-2021-21972
Details CVE 161 
cve-2019-19781
Details MITRE ATT&CK Techniques 298 
T1562.001
Details MITRE ATT&CK Techniques 92 
T1070.001
Details MITRE ATT&CK Techniques 422 
T1041
Details MITRE ATT&CK Techniques 472 
T1486
Details MITRE ATT&CK Techniques 197 
T1489
Details MITRE ATT&CK Techniques 276 
T1490