Threat Group Cards: A Threat Actor Encyclopedia
Excerpt
Home > List all groups > List all tools > List all groups using tool Defray777 Tool: Defray777
Names
Defray777
Defray
Defray 2018
Target777
Ransom X
RansomExx
Glushkov
Category Malware
Type Ransomware, Big Game Hunting
Description
(Palo Alto) Defray777 is an elusive family of ransomware also known as Ransom X and RansomExx. Although it has recently been covered in the news as a new family, it has been in use since at least 2018 and is responsible for a number of high-profile ransomware incidents -- as detailed in the articles we linked to.
Defray777 runs entirely in memory, which is why there have been so few publicly discussed samples to date. In several recent incidents, Defray777 was loaded into memory an…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by ETDA Threat Group Cards on apt.etda.or.th.
More from ETDA Threat Group Cards19
- Threat Group Cards: A Threat Actor EncyclopediaETDA Threat Group Cards · Added 25 Oct
- Threat Group Cards: A Threat Actor EncyclopediaETDA Threat Group Cards · Added 20 Oct
- listgroups.cgi?u=72670111-f95a-423c-a296-f424939cc08eETDA Threat Group Cards · Added 19 Oct
- listgroups.cgi?u=cacc4de8-a9b2-4231-9fdb-8aefa8ed0a5cETDA Threat Group Cards · Added 19 Oct
On the same topics
- Etude de cas : Comment Hunters International et ses affiliés ciblentSynacktiv · Added 25 Oct
- Inside Trickbot, Russia’s Notorious Ransomware GangWIRED · Published 1 Feb 2022
- darkraas-ransomware-intelligence-datacyberpress.org · Added 19 Oct
- Ragnar LoaderPRODAFT · Added 18 Oct
