Malware: SamSam

Description

[SamSam](https://attack.mitre.org/software/S0370) is ransomware that appeared in early 2016. Unlike some ransomware, its variants have required operators to manually interact with the malware to execute some of its core components.(Citation: US-CERT SamSam 2018)(Citation: Talos SamSam Jan 2018)(Citation: Sophos SamSam Apr 2018)(Citation: Symantec SamSam Oct 2018)

External References

• mitre-attack
• Sophos SamSam Apr 2018
• Symantec SamSam Oct 2018
• US-CERT SamSam 2018
• Talos SamSam Jan 2018

Techniques Used by This Malware

• T1027.013 — Encrypted/Encoded File
• T1027.016 — Junk Code Insertion
• T1059.003 — Windows Command Shell
• T1070.004 — File Deletion
• T1486 — Data Encrypted for Impact