SamSam — Malware Profile

SamSam is ransomware that appeared in early 2016. Unlike some ransomware, its variants have required operators to manually interact with the malware to execute some of its core components.

MITRE ATT&CK techniques (5)

• T1027.013 Encrypted/Encoded File
• T1027.016 Junk Code Insertion
• T1059.003 Windows Command Shell
• T1070.004 File Deletion
• T1486 Data Encrypted for Impact

Read the full analysis on IntelFusions