REvil-ution - A Persistent Ransomware Operation
Tags
country: France Russia
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Password Spraying - T1110.003 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID 75aef7a9-37d8-41ea-bc16-7916561e6d62
Fingerprint 273080bf9f85b70b
Analysis status DONE
Considered CTI value 2
Text language
Published July 9, 2021, 1:47 p.m.
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Nov. 17, 2024, 5:57 p.m.
Headline REvil-ution – A Persistent Ransomware Operation
Title REvil-ution - A Persistent Ransomware Operation
Detected Hints/Tags/Attributes 76/2/6
Source URLs
Redirection Url
Details Source https://www.cyjax.com/2021/07/09/revilevolution/
URL Provider
Details Provider Source level domain
Details cyjax.com www.cyjax.com
Attributes
Details Type #Events CTI Value
Details CVE 49 
cve-2018-8453
Details CVE 128 
cve-2019-11510
Details CVE 161 
cve-2019-19781
Details CVE 25 
cve-2020-0609
Details CVE 20 
cve-2020-0610
Details Threat Actor Identifier - FIN 377 
FIN7