Prestige

Malware & Tools · Prestige

· MalwareS1058 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Prestige ransomware has been used by Sandworm Team since at least March 2022, including against transportation and related logistics industries in Ukraine and Poland in October 2022.(Citation: Microsoft Prestige ransomware October 2022)

Tactic Coverage

execution (3)impact (3)persistence (2)privilege escalation (2)defense impairment (2)discovery (1)

Used By (1 groups)

G0034Sandworm TeamELECTRUM, Telebots

Techniques (9)

T1053.005Scheduled Task

executionpersistence

T1059.001PowerShell

execution

T1083File and Directory Discovery

discovery

T1106Native API

execution

T1112Modify Registry

defense impairmentpersistence

T1484.001Group Policy Modification

defense impairment

References

https://attack.mitre.org/software/S1058 https://www.microsoft.com/en-us/security/blog/2022/10/14/new-prestige-ransomware-impacts-organizations-in-ukraine-and-poland/