S0618 FIVEHANDS

malwareEnterprise

platformsWindows

also known asFIVEHANDS

FIVEHANDS is a customized version of DEATHRANSOM ransomware written in C++. FIVEHANDS has been used since at least 2021, including in Ransomware-as-a-Service (RaaS) campaigns, sometimes along with SombRAT.

techniques used (8)

ATT&CK techniques this enables or maps to.

T1027.013Encrypted/Encoded File
T1047Windows Management Instrumentation
T1059Command and Scripting Interpreter
T1083File and Directory Discovery
T1135Network Share Discovery
T1140Deobfuscate/Decode Files or Information
T1486Data Encrypted for Impact
T1490Inhibit System Recovery

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan