INC Ransomware

Malware & Tools · INC Ransomware

· MalwareS1139 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

INC Ransomware is a ransomware strain that has been used by the INC Ransom group since at least 2023 against multiple industry sectors worldwide. INC Ransomware can employ partial encryption combined with multi-threading to speed encryption.(Citation: SentinelOne INC Ransomware)(Citation: Huntress INC Ransom Group August 2023)(Citation: Secureworks GOLD IONIC April 2024)

Tactic Coverage

discovery (6)impact (4)execution (2)stealth (1)initial access (1)lateral movement (1)

Used By (1 groups)

G1032INC RansomGOLD IONIC

Techniques (15)

T1047Windows Management Instrumentation

execution

T1057Process Discovery

discovery

T1083File and Directory Discovery

discovery

T1106Native API

execution

T1120Peripheral Device Discovery

discovery

T1135Network Share Discovery

discovery

T1140Deobfuscate/Decode Files or Information

References

https://attack.mitre.org/software/S1139 https://www.secureworks.com/blog/gold-ionic-deploys-inc-ransomware https://www.sentinelone.com/anthology/inc-ransom/https://www.huntress.com/blog/investigating-new-inc-ransom-group-activity