S0616Windows

S0616DEATHRANSOM

Platforms
1
ATT&CK
14.1
References
2

Description

[DEATHRANSOM](https://attack.mitre.org/software/S0616) is ransomware written in C that has been used since at least 2020, and has potential overlap with [FIVEHANDS](https://attack.mitre.org/software/S0618) and [HELLOKITTY](https://attack.mitre.org/software/S0617).(Citation: FireEye FiveHands April 2021)

Platforms· 1

Windows

References

  1. https://attack.mitre.org/software/S0616
  2. https://www.fireeye.com/blog/threat-research/2021/04/unc2447-sombrat-and-fivehands-ransomware-sophisticated-financial-threat.html

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
FIVEHANDS
Software
HELLOKITTY
Software
SombRAT
Software
EKANS
Software
DeathOfShadow
Software
SamSam
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.