S0605 EKANS

malwareEnterpriseICS

PlattformenWindows

auch bekannt alsEKANS · SNAKEHOSE

EKANS is ransomware variant written in Golang that first appeared in mid-December 2019 and has been used against multiple sectors, including energy, healthcare, and automotive manufacturing, which in some cases resulted in significant operational disruptions. EKANS has used a hard-coded kill-list of processes, including some associated with common ICS software platforms (e.g., GE Proficy, Honeywell HMIWeb, etc), similar to those defined in MegaCortex.

genutzte Techniken (13)

ATT&CK-Techniken, die dies ermöglicht oder abbildet.

T0828Loss of Productivity and Revenue
T0840Network Connection Enumeration
T0849Masquerading
T0881Service Stop
T1016System Network Configuration Discovery
T1027Obfuscated Files or Information
T1036.005Match Legitimate Resource Name or Location
T1047Windows Management Instrumentation
T1057Process Discovery
T1486Data Encrypted for Impact
T1489Service Stop
T1490Inhibit System Recovery
T1685Disable or Modify Tools

Quelle

Wo diese Definition veröffentlicht ist.

auf ATT&CK ansehen

scry

Software wie diese trägt bekannte Schwachstellen, sobald sie im Internet exponiert ist. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan