New Ransomware Spotted: White Rabbit and Its Evasion Tactics
Tags
attack-pattern: | Data Malware - T1587.001 Malware - T1588.001 |
Common Information
Type | Value |
---|---|
UUID | 8405aebe-4f7d-404b-88e3-d3388c991b24 |
Fingerprint | a552e9580775ba5b |
Analysis status | DONE |
Considered CTI value | 0 |
Text language | |
Published | Jan. 18, 2022, midnight |
Added to db | Oct. 15, 2024, 3:17 p.m. |
Last updated | Nov. 17, 2024, 6:54 p.m. |
Headline | New Ransomware Spotted: White Rabbit and Its Evasion Tactics |
Title | New Ransomware Spotted: White Rabbit and Its Evasion Tactics |
Detected Hints/Tags/Attributes | 33/1/7 |
Source URLs
URL Provider
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | Domain | 3 | 104-168-132-128.nip.io |
|
Details | File | 2 | scrypt.txt |
|
Details | File | 196 | desktop.ini |
|
Details | File | 143 | thumbs.db |
|
Details | sha256 | 2 | b0844458aaa2eaf3e0d70a5ce41fc2540b7e46bdc402c798dbdfe12b59ab32c3 |
|
Details | Threat Actor Identifier - FIN | 68 | FIN8 |
|
Details | Url | 1 | https://104-168-132-128.nip.io/cae260 |