Malware: LockerGoga

Description

[LockerGoga](https://attack.mitre.org/software/S0372) is ransomware that was first reported in January 2019, and has been tied to various attacks on European companies, including industrial and manufacturing firms.(Citation: Unit42 LockerGoga 2019)(Citation: CarbonBlack LockerGoga 2019)

External References

• mitre-attack
• CarbonBlack LockerGoga 2019
• Unit42 LockerGoga 2019

Techniques Used by This Malware

• T1070.004 — File Deletion
• T1486 — Data Encrypted for Impact
• T1529 — System Shutdown/Reboot
• T1531 — Account Access Removal
• T1553.002 — Code Signing
• T1562.001 — Disable or Modify Tools
• T1570 — Lateral Tool Transfer

APT Groups Using This Malware

• FIN6