2021-06-01 Prometheus and Grief are the new additions to the ransomware threat landscape

📃Title: Prometheus and Grief are the new additions to the ransomware threat landscape
📅Date: 2021-06-01
🔗References:

• https://www.securitylab.ru/news/520753.php
• https://social.cyware.com/news/prometheus-an-emerging-threat-in-the-ransomware-landscape-5bb9742f
• https://unit42.paloaltonetworks.com/prometheus-ransomware/

🔖Rectifyq Taxonomies:

• relevancy: 🔴 Highly Relevant
• category: ⚔Threat
• target: targeted
• MY-relevancy: relevant

🔖MISP Galaxies:

• ransomware=“Prometheus”
• target-information=“Brazil”
• target-information=“France”
• target-information=“Malaysia”
• target-information=“Netherlands”
• target-information=“Norway”
• target-information=“Switzerland”
• target-information=“United Arab Emirates”
• target-information=“United States”
• producer= Palo-Alto
• mitre-attack-pattern=[‘T1486’, ‘T1562.001’, ‘T1490’, ‘T1112’, ‘T1057’, ‘T1547.001’]

MISP event uuid: 9076ee9a-5ba6-472a-aa4b-dee9f7294009

Indicator of Compromise (IoCs)

type,value,comment
md5, 43f0d539df164a311012f5cbe1cc8c29, ''
md5, d70181d031e35f86d26be56d230b7d4e, ''
md5, e1f063d63a75e0e0e864052b1a50ab06, ''
md5, 14de196b28bc12b5e571ea8303668041, ''
md5, fbad77e0e8c402f55bea9c8d0f0ec982, ''
md5, 1493deb48d84805f19ba35e60d485e87, ''
md5, a6dcf23059f6e61fa683907c47baf73e, ''
md5, d35e349ff1360c35998c9937c804a8f9, ''
md5, 9a7509833cf78634f8fd166b7807f3a3, ''
md5, dd4eb8aa3371b7fd821a7a9730c924cf, ''
md5, 96c565af56a5ba8339f35121bf9ff196, ''

Full IOCs available in Rectifyq’s MISP