Inc Ransom Attack Analysis: Extortion Methodologies - ReliaQuest
Tags
cmtmf-attack-pattern: Masquerading
country: Canada
attack-pattern: Data Credentials - T1589.001 Domain Accounts - T1078.002 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Windows Service - T1543.003 Tool - T1588.002 Vulnerabilities - T1588.006 Masquerading - T1036 Powershell - T1086 Windows Management Instrumentation - T1047 Masquerading
Show in Graph
Common Information
Type Value
UUID f646cc52-f7a5-420a-95af-af6902c6cd8f
Fingerprint b4691bd18825b6c3
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 10, 2024, 9:07 a.m.
Added to db Sept. 12, 2024, 3:03 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Inc Ransom Attack Analysis: Extortion Methodologies
Title Inc Ransom Attack Analysis: Extortion Methodologies - ReliaQuest
Detected Hints/Tags/Attributes 98/3/10
Source URLs
Redirection Url
Details Redirection https://www.reliaquest.com/blog/inc-ransom-attack-analysis-extortion-methodologies/?&web_view=true
Details Source https://www.reliaquest.com/blog/inc-ransom-attack-analysis-extortion-methodologies/?web_view=true
URL Provider
Details Provider Source level domain
Details reliaquest.com www.reliaquest.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 99 ✔ Cyware News - Latest Cyber News https://cyware.com/allnews/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 152 
cve-2023-3519
Details Domain 49 
wmiexec.py
Details Domain 88 
secretsdump.py
Details Domain 2 
palloaltonetworks.com
Details File 40 
netscan.exe
Details File 7 
megasyncsetup64.exe
Details File 256 
net.exe
Details File 45 
wmiexec.py
Details File 85 
secretsdump.py
Details File 2 
split.exe