splunk-security_content/docs/_pages/malware.md

title, layout, author_profile, taxonomy, permalink, sidebar

title	layout	author_profile	taxonomy	permalink	sidebar
Malware	tag	false	Malware	/stories/malware/	nav stories

Name	Technique	Tactic
BlackMatter Ransomware	Data Encrypted for Impact	Impact
Clop Ransomware	Clear Windows Event Logs	Defense Evasion
ColdRoot MacOS RAT	None	None
DHS Report TA18-074A	Modify Registry	Defense Evasion
DarkSide Ransomware	Bypass User Account Control	Privilege Escalation
Dynamic DNS	Exfiltration Over Alternative Protocol	Exfiltration
Emotet Malware DHS Report TA18-201A	Spearphishing Attachment	Initial Access
FIN7	XSL Script Processing	Defense Evasion
Hidden Cobra Malware	SMB/Windows Admin Shares	Lateral Movement
IcedID	Scheduled Task	Execution
Orangeworm Attack Group	Windows Service	Persistence
Ransomware	Clear Windows Event Logs	Defense Evasion
Ransomware Cloud	Data Encrypted for Impact	Impact
Remcos	Screen Capture	Collection
Revil Ransomware	CMSTP	Defense Evasion
Ryuk Ransomware	Service Stop	Impact
SamSam Ransomware	Data Encrypted for Impact	Impact
Trickbot	SMB/Windows Admin Shares	Lateral Movement
Unusual Processes	Exploit Public-Facing Application	Initial Access
Windows File Extension and Association Abuse	Rename System Utilities	Defense Evasion
Windows Service Abuse	Windows Service	Persistence
XMRig	Windows Service	Persistence