Hide Navigation Hide TOC

ransomhub (9a1bfbf8-e07c-55d0-9ca5-3bcfa67f2468)

A new ransomware group is said to have emerged in the cyber threat landscape. This time, it is a group known as RansomHub. The group emerged in mid-February 2024 and has already listed several organizations as alleged victims of their attacks, resulting from extortion through encryption and data leaks.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Windows Command Shell - T1059.003 (d1fcf083-a721-4223-aedf-bf8960798d62)	Attack Pattern	ransomhub (9a1bfbf8-e07c-55d0-9ca5-3bcfa67f2468)	Ransomware	1
Windows Management Instrumentation - T1047 (01a5a209-b94c-450b-b7f9-946497d91055)	Attack Pattern	ransomhub (9a1bfbf8-e07c-55d0-9ca5-3bcfa67f2468)	Ransomware	1
ransomhub (9a1bfbf8-e07c-55d0-9ca5-3bcfa67f2468)	Ransomware	Service Stop - T1489 (20fb2507-d71c-455d-9b6d-6104461cf26b)	Attack Pattern	1
Inhibit System Recovery - T1490 (f5d8eed6-48a9-4cdf-a3d7-d1ffa99c3d2a)	Attack Pattern	ransomhub (9a1bfbf8-e07c-55d0-9ca5-3bcfa67f2468)	Ransomware	1
ransomhub (9a1bfbf8-e07c-55d0-9ca5-3bcfa67f2468)	Ransomware	Lateral Tool Transfer - T1570 (bf90d72c-c00b-45e3-b3aa-68560560d4c5)	Attack Pattern	1
Clear Windows Event Logs - T1070.001 (6495ae23-3ab4-43c5-a94f-5638a2c31fd2)	Attack Pattern	ransomhub (9a1bfbf8-e07c-55d0-9ca5-3bcfa67f2468)	Ransomware	1
ransomhub (9a1bfbf8-e07c-55d0-9ca5-3bcfa67f2468)	Ransomware	Data Encrypted for Impact - T1486 (b80d107d-fa0d-4b60-9684-b0433e8bdba0)	Attack Pattern	1
ransomhub (9a1bfbf8-e07c-55d0-9ca5-3bcfa67f2468)	Ransomware	Impair Defenses - T1562 (3d333250-30e4-4a82-9edc-756c68afc529)	Attack Pattern	1
Windows Command Shell - T1059.003 (d1fcf083-a721-4223-aedf-bf8960798d62)	Attack Pattern	Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830)	Attack Pattern	2
Clear Windows Event Logs - T1070.001 (6495ae23-3ab4-43c5-a94f-5638a2c31fd2)	Attack Pattern	Indicator Removal - T1070 (799ace7f-e227-4411-baa0-8868704f2a69)	Attack Pattern	2