Malware: Moneybird

Description

[Moneybird](https://attack.mitre.org/software/S1137) is a ransomware variant written in C++ associated with [Agrius](https://attack.mitre.org/groups/G1030) operations. The name "Moneybird" is contained in the malware's ransom note and as strings in the executable.(Citation: CheckPoint Agrius 2023)

External References

• mitre-attack
• CheckPoint Agrius 2023

Techniques Used by This Malware

• T1027.009 — Embedded Payloads
• T1486 — Data Encrypted for Impact

APT Groups Using This Malware

• Agrius