Malware: RobbinHood

Description

[RobbinHood](https://attack.mitre.org/software/S0400) is ransomware that was first observed being used in an attack against the Baltimore city government's computer network.(Citation: CarbonBlack RobbinHood May 2019)(Citation: BaltimoreSun RobbinHood May 2019)

External References

• mitre-attack
• CarbonBlack RobbinHood May 2019
• BaltimoreSun RobbinHood May 2019

Techniques Used by This Malware

• T1059.003 — Windows Command Shell
• T1070.005 — Network Share Connection Removal
• T1486 — Data Encrypted for Impact
• T1489 — Service Stop
• T1490 — Inhibit System Recovery
• T1562.001 — Disable or Modify Tools