ATT&CK ReferencesPalo Alto Unit 42 EKANS

Palo Alto Unit 42 EKANS

Hinchliffe, A. Santos, D. (2020, June 26). Threat Assessment: EKANS Ransomware. Retrieved February 9, 2021.

Techniques0

Not cited by any technique.

None recorded.

None recorded.

Technique	Used by	Procedure example
T1486 Data Encrypted for Impact	MalwareEKANS	EKANS uses standard encryption library functions to encrypt files. Dragos EKANS Palo Alto Unit 42 EKANS
T1489 Service Stop	MalwareEKANS	EKANS stops database, data backup solution, antivirus, and ICS-related processes. Dragos EKANS FireEye Ransomware Feb 2020 Palo Alto Unit 42 EKANS
T1490 Inhibit System Recovery	MalwareEKANS	EKANS removes backups of Volume Shadow Copies to disable any restoration capabilities. Dragos EKANS Palo Alto Unit 42 EKANS

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.