Megazord

Malware & Tools · Megazord

· MalwareS1191 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

Megazord is a Rust-based variant of Akira ransomware that has been in use since at least August 2023 to target Windows environments. Megazord has been attributed to the Akira group based on overlapping infrastructure though is possibly not exclusive to the group.(Citation: CISA Akira Ransomware APR 2024)(Citation: Cisco Akira Ransomware OCT 2024)(Citation: Palo Alto Howling Scorpius DEC 2024)

Tactic Coverage

discovery (3)impact (2)execution (1)

Used By (1 groups)

G1024AkiraGOLD SAHARA, PUNK SPIDER

Techniques (6)

T1057Process Discovery

discovery

T1059.003Windows Command Shell

execution

T1083File and Directory Discovery

discovery

T1486Data Encrypted for Impact

impact

T1489Service Stop

impact

T1654Log Enumeration

discovery

References

https://attack.mitre.org/software/S1191 https://www.cisa.gov/sites/default/files/2024-04/aa24-109a-stopransomware-akira-ransomware_2.pdf https://blog.talosintelligence.com/akira-ransomware-continues-to-evolve/https://unit42.paloaltonetworks.com/threat-assessment-howling-scorpius-akira-ransomware/