Santos, D. (2021, April 13). Threat Assessment: Clop Ransomware. Retrieved July 30, 2021.
Not cited by any technique.
None recorded.
None recorded.
| Technique | Used by | Procedure example |
|---|---|---|
| T1486 Data Encrypted for Impact |
MalwareClop | Clop can encrypt files using AES, RSA, and RC4 and will add the ".clop" extension to encrypted files. |
| T1489 Service Stop |
MalwareClop | Clop can kill several processes and services related to backups and security solutions. |
| T1497.003 Time Based Checks |
MalwareClop | Clop has used the |
| T1553.002 Code Signing |
MalwareClop | Clop can use code signing to evade detection. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
