An Analysis of the BabLock Ransomware
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Hardware - T1592.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Powershell - T1086 Windows Management Instrumentation - T1047
Show in Graph
Common Information
Type Value
UUID 920bb8b8-9b47-4f9a-b765-fbb7f40c8945
Fingerprint a7b201d99214b6df
Analysis status DONE
Considered CTI value 0
Text language
Published April 18, 2023, midnight
Added to db June 5, 2023, 10:46 a.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline An Analysis of the BabLock (aka Rorschach) Ransomware
Title An Analysis of the BabLock Ransomware
Detected Hints/Tags/Attributes 52/2/3
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_us/research/23/d/an-analysis-of-the-bablock-ransomware.html
Details Source https://www.trendmicro.com/en_us/research/23/d/an-analysis-of-the-bablock-ransomware.html?&web_view=true
Details Source https://www.trendmicro.com/en_se/research/23/d/an-analysis-of-the-bablock-ransomware.html
Details Source https://www.trendmicro.com/en_id/research/23/d/an-analysis-of-the-bablock-ransomware.html
Details Source https://www.trendmicro.com/en_dk/research/23/d/an-analysis-of-the-bablock-ransomware.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 99 ✔ Cyware News - Latest Cyber News https://cyware.com/allnews/feed 2024-08-30 22:08
Details 119 ✔ Trend Micro Research, News and Perspectives https://feeds.feedburner.com/TrendMicroSimplySecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 68 
config.ini
Details File 380 
notepad.exe
Details File 345 
vssadmin.exe