Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Intel]: https://www.fireeye.com/blog/threat-research/2021/05/shining-a-light-on-darkside-ransomware-operations.html #321

Open
timb-machine opened this issue Apr 20, 2022 · 0 comments

Comments

@timb-machine
Copy link
Owner

timb-machine commented Apr 20, 2022

Area

Malware reports

Parent threat

Execution, Persistence, Privilege Escalation, Command and Control, Exfiltration, Impact

Finding

https://www.fireeye.com/blog/threat-research/2021/05/shining-a-light-on-darkside-ransomware-operations.html

Industry reference

attack:T1048:Exfiltration Over Alternative Protocol
attack:T1567:Exfiltration Over Web Service
attack:T1573:Encrypted Channel
attack:T1071.001:Web Protocols
attack:T1053.003:Cron
attack:T1486:Data Encrypted for Impact

Malware reference

DarkSide

Actor reference

UNC2628
UNC2659
UNC2465

Component

Linux

Scenario

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment