Malware: HELLOKITTY

Description

[HELLOKITTY](https://attack.mitre.org/software/S0617) is a ransomware written in C++ that shares similar code structure and functionality with [DEATHRANSOM](https://attack.mitre.org/software/S0616) and [FIVEHANDS](https://attack.mitre.org/software/S0618). [HELLOKITTY](https://attack.mitre.org/software/S0617) has been used since at least 2020, targets have included a Polish video game developer and a Brazilian electric power company.(Citation: FireEye FiveHands April 2021)

External References

• mitre-attack
• FireEye FiveHands April 2021

Techniques Used by This Malware

• T1047 — Windows Management Instrumentation
• T1057 — Process Discovery
• T1082 — System Information Discovery
• T1135 — Network Share Discovery
• T1486 — Data Encrypted for Impact
• T1490 — Inhibit System Recovery