Malware: Megazord

Description

[Megazord](https://attack.mitre.org/software/S1191) is a Rust-based variant of [Akira](https://attack.mitre.org/software/S1129) ransomware that has been in use since at least August 2023 to target Windows environments. [Megazord](https://attack.mitre.org/software/S1191) has been attributed to the [Akira](https://attack.mitre.org/groups/G1024) group based on overlapping infrastructure though is possibly not exclusive to the group.(Citation: CISA Akira Ransomware APR 2024)(Citation: Cisco Akira Ransomware OCT 2024)(Citation: Palo Alto Howling Scorpius DEC 2024)

External References

• mitre-attack
• CISA Akira Ransomware APR 2024
• Cisco Akira Ransomware OCT 2024
• Palo Alto Howling Scorpius DEC 2024

Techniques Used by This Malware

• T1057 — Process Discovery
• T1059.003 — Windows Command Shell
• T1083 — File and Directory Discovery
• T1486 — Data Encrypted for Impact
• T1489 — Service Stop
• T1654 — Log Enumeration

APT Groups Using This Malware

• Akira