S1058 Prestige

malwareEnterprise

platformsWindows

also known asPrestige

Prestige ransomware has been used by Sandworm Team since at least March 2022, including against transportation and related logistics industries in Ukraine and Poland in October 2022.

techniques used (9)

ATT&CK techniques this enables or maps to.

T1053.005Scheduled Task
T1059.001PowerShell
T1083File and Directory Discovery
T1106Native API
T1112Modify Registry
T1484.001Group Policy Modification
T1486Data Encrypted for Impact
T1489Service Stop
T1490Inhibit System Recovery

used by groups (1)

Threat groups associated with this.

G0034Sandworm Team

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan