BlackByte 2.0 Ransomware — Malware Profile

BlackByte 2.0 Ransomware is a replacement for BlackByte Ransomware. Unlike BlackByte Ransomware, BlackByte 2.0 Ransomware does not have a common key for victim decryption. BlackByte 2.0 Ransomware remains uniquely associated with BlackByte operations.

MITRE ATT&CK techniques (11)

• T1055 Process Injection
• T1068 Exploitation for Privilege Escalation
• T1070.004 File Deletion
• T1070.006 Timestomp
• T1112 Modify Registry
• T1135 Network Share Discovery
• T1486 Data Encrypted for Impact
• T1489 Service Stop
• T1490 Inhibit System Recovery
• T1569.002 Service Execution
• T1686.003 Windows Host Firewall

Attributed threat actors

• BlackByte

Read the full analysis on IntelFusions