ATT&CK ReferencesTrend Micro Black Basta Spotlight September 2022

Trend Micro Black Basta Spotlight September 2022

Trend Micro. (2022, September 1). Ransomware Spotlight Black Basta. Retrieved March 8, 2023.

Open the source

Techniques0

Not cited by any technique.

Groups0

None recorded.

Software0

None recorded.

Campaigns0

None recorded.

Procedure examples5

Technique	Used by	Procedure example
T1059.001 PowerShell	MalwareBlack Basta	Black Basta has used PowerShell scripts for discovery and to execute files over the network. NCC Group Black Basta June 2022 Trend Micro Black Basta May 2022 Trend Micro Black Basta Spotlight September 2022
T1083 File and Directory Discovery	MalwareBlack Basta	Black Basta can enumerate specific files for encryption. Avertium Black Basta June 2022 Check Point Black Basta October 2022 Cyble Black Basta May 2022 Deep Instinct Black Basta August 2022 NCC Group Black Basta June 2022 Palo Alto Networks Black Basta August 2022 Trend Micro Black Basta Spotlight September 2022 Uptycs Black Basta ESXi June 2022
T1204.002 Malicious File	MalwareBlack Basta	Black Basta has been downloaded and executed from malicious Excel files. Trend Micro Black Basta May 2022 Trend Micro Black Basta Spotlight September 2022
T1486 Data Encrypted for Impact	MalwareBlack Basta	Black Basta can encrypt files with the ChaCha20 cypher and using a multithreaded process to increase speed. Black Basta has also encrypted files while the victim system is in safe mode, appending `.basta` upon completion. BlackBerry Black Basta May 2022 Check Point Black Basta October 2022 Cyble Black Basta May 2022 Deep Instinct Black Basta August 2022 Minerva Labs Black Basta May 2022 NCC Group Black Basta June 2022 Palo Alto Networks Black Basta August 2022 Trend Micro Black Basta May 2022 Trend Micro Black Basta Spotlight September 2022 Uptycs Black Basta ESXi June 2022
T1490 Inhibit System Recovery	MalwareBlack Basta	Black Basta can delete shadow copies using vssadmin.exe. Avertium Black Basta June 2022 Check Point Black Basta October 2022 Cyble Black Basta May 2022 Deep Instinct Black Basta August 2022 Minerva Labs Black Basta May 2022 NCC Group Black Basta June 2022 Palo Alto Networks Black Basta August 2022 Trend Micro Black Basta May 2022 Trend Micro Black Basta Spotlight September 2022

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.