Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
A technical analysis of the BackMyData ransomware used to attack hospitals in Romania
Malware Families
Excerpt
Summary According to BleepingComputer , a ransomware attack that occurred starting 0n February 11 forced 100 hospitals across Romania to take their systems offline. BackMyData ransomware, which took credit for it, belongs to the Phobos family. The malware embedded an AES key that is used to decrypt its configuration containing whitelisted extensions, files, and directories, a public RSA key that is used to encrypt AES keys used for files’ encryption, and other…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 396a2f2dd09c936e93d250e8467ac7a9c0a923ea7f9a395e63c375b877a399a6 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…