Sunturai
Threat report

www.microsoft.com/en-us/security/blog/2022/10/14/new-prestige-ransomware-impacts-organizations-in-ukraine-and-poland

https://www.microsoft.com/en-us/security/blog/2022/10/14/new-prestige-ransomware-impacts-organizations-in-ukraine-and-poland/
Published on
www.microsoft.com

ATT&CK techniques those detections carry

  • T1012Query Registry
  • T1003.005Cached Domain Credentials
  • T1016System Network Configuration Discovery
  • T1033System Owner/User Discovery
  • T1047Windows Management Instrumentation
  • T1049System Network Connections Discovery
  • T1082System Information Discovery
  • T1115Clipboard Data
  • +9 more
Open the original

18 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
DetectionSeverity
Windows System User Discovery Via QuserMedium
Windows System Network Connections Discovery NetshInformational
Windows Service Stop AttemptMedium
Windows Indirect Command Execution Via Series Of ForfilesInformational
Windows Private Keys DiscoveryInformational
Windows WMI Process And Service ListInformational
Windows System Network Config Discovery Display DNSInformational
Windows Steal or Forge Kerberos Tickets KlistMedium
Windows Security Support Provider Reg QueryInformational
Windows Registry Entries Restored Via RegMedium
Windows Registry Entries Exported Via RegMedium
Windows Password Managers DiscoveryInformational
Windows Information Discovery FsutilInformational
Windows Credentials in Registry Reg QueryInformational
Windows Credentials from Password Stores QueryInformational
Windows ClipBoard Data via Get-ClipBoardInformational
Windows Change File Association Command To NotepadMedium
Windows Cached Domain Credentials Reg QueryInformational

Showing 18 of 18

Filter in the catalogue

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice