Loading malware…
1 distinct threat actor Mallory has associated with this family across public reporting. Open in Mallory to see the full evidence chain and overlapping campaigns.
the Cyble Research Labs came across ransomware known as VENOMOUS, which encrypts the user document files using AES 256 encryption and appends the extension of encrypted files as “.VENOMOUS”
8 distinct techniques documented for this family, organized by ATT&CK tactic.
To compromise the infrastructure, TAs leverage various techniques such as exploiting the vulnerable assets exposed on the Internet.
Tactic Technique ID Technique Name Initial Access T1190 Exploit Public-Facing Application Defense Evasion T1112 T1027 T1562.001 Modify Registry Obfuscated Files or Information Impair Defences: Disable or Modify Tools
Tactic Technique ID Technique Name Initial Access T1190 Exploit Public-Facing Application Defense Evasion T1112 T1027 T1562.001 Modify Registry Obfuscated Files or Information Impair Defences: Disable or Modify Tools
Tactic Technique ID Technique Name Initial Access T1190 Exploit Public-Facing Application Defense Evasion T1112 T1027 T1562.001 Modify Registry Obfuscated Files or Information Impair Defences: Disable or Modify Tools
Tactic Technique ID Technique Name Initial Access T1190 Exploit Public-Facing Application Defense Evasion T1112 T1027 T1562.001 Modify Registry Obfuscated Files or Information Impair Defences: Disable or Modify Tools
Tactic Technique ID Technique Name ... Discovery T1083 T1135 File and Directory Discovery Network Share Discovery
Tactic Technique ID Technique Name ... Discovery T1083 T1135 File and Directory Discovery Network Share Discovery
While analyzing the Python code, we found that the ransomware uses Advanced Encryption Standard (AES) algorithms to encrypt the files. The IV is generated for each file and is used during the encryption process.
Tactic Technique ID Technique Name ... Impact T1486 T1490 Data Encrypted for Impact Inhibit System Recovery
5 indicators attributed across vendor reports, sandbox runs, and researcher write-ups. Values are masked here and available in full in Mallory.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.