WastedLocker

Malware & Tools · WastedLocker

· MalwareS0612 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

WastedLocker is a ransomware family attributed to Indrik Spider that has been used since at least May 2020. WastedLocker has been used against a broad variety of sectors, including manufacturing, information technology, and media.(Citation: Symantec WastedLocker June 2020)(Citation: NCC Group WastedLocker June 2020)(Citation: Sentinel Labs WastedLocker July 2020)

Tactic Coverage

stealth (7)discovery (5)execution (4)defense impairment (2)persistence (2)impact (2)privilege escalation (2)

Used By (1 groups)

G0119Indrik SpiderEvil Corp, Manatee Tempest

Techniques (20)

T1012Query Registry

discovery

T1027.013Encrypted/Encoded File

stealth

T1027.016Junk Code Insertion

stealth

T1059.003Windows Command Shell

execution

T1083File and Directory Discovery

discovery

T1106Native API

execution

T1112Modify Registry

References

https://attack.mitre.org/software/S0612 https://research.nccgroup.com/2020/06/23/wastedlocker-a-new-ransomware-variant-developed-by-the-evil-corp-group/https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/wastedlocker-ransomware-us https://www.sentinelone.com/labs/wastedlocker-ransomware-abusing-ads-and-ntfs-file-attributes/