RobbinHood — Malware Profile

RobbinHood is ransomware that was first observed being used in an attack against the Baltimore city government's computer network.

MITRE ATT&CK techniques (6)

• T1059.003 Windows Command Shell
• T1070.005 Network Share Connection Removal
• T1486 Data Encrypted for Impact
• T1489 Service Stop
• T1490 Inhibit System Recovery
• T1685 Disable or Modify Tools

Read the full analysis on IntelFusions