DEATHRANSOM — Malware Profile

DEATHRANSOM is ransomware written in C that has been used since at least 2020, and has potential overlap with FIVEHANDS and HELLOKITTY.

MITRE ATT&CK techniques (9)

• T1047 Windows Management Instrumentation
• T1071.001 Web Protocols
• T1083 File and Directory Discovery
• T1105 Ingress Tool Transfer
• T1135 Network Share Discovery
• T1486 Data Encrypted for Impact
• T1490 Inhibit System Recovery
• T1614.001 System Language Discovery
• T1680 Local Storage Discovery

Read the full analysis on IntelFusions