ELPACO-Team Ransomware: A Fresh Variant from the MIMIC Ransomware Family
Tags
cmtmf-attack-pattern: Boot Or Logon Autostart Execution
maec-delivery-vectors: Watering Hole
attack-pattern: Data Boot Or Logon Autostart Execution - T1547 Exploitation For Client Execution - T1658 Exploits - T1587.004 Exploits - T1588.005 File Deletion - T1070.004 File Deletion - T1630.002 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Exploitation For Client Execution - T1203 File Deletion - T1107 Powershell - T1086 User Execution - T1204 User Execution
Show in Graph
Common Information
Type Value
UUID 69c6fd5b-ad39-46a6-bde4-013829c53ec5
Fingerprint a11428e163709e42
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 20, 2024, 11:02 a.m.
Added to db Nov. 20, 2024, 12:36 p.m.
Last updated Nov. 20, 2024, 12:37 p.m.
Headline ELPACO-Team Ransomware: A Fresh Variant from the MIMIC Ransomware Family
Title ELPACO-Team Ransomware: A Fresh Variant from the MIMIC Ransomware Family
Detected Hints/Tags/Attributes 33/3/8
Source URLs
Redirection Url
Details Source https://medium.com/@harboot/elpaco-team-ransomware-a-fresh-variant-from-the-mimic-ransomware-family-d762da735dfc?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 1 
elpaco-teamv.exe
Details File 43 
7za.exe
Details File 1 
elpaco-team.exe
Details File 1 
svhostss.exe
Details md5 1 
33eeeb25f834e0b180f960ecb9518ea0
Details md5 1 
B93EB0A48C91A53BDA6A1A074A4B431E
Details md5 1 
AC34BA84A5054CD701EFAD5DD14645C9
Details md5 1 
0BF7C0D8E3E02A6B879EFAB5DEAB013C