Malware: SynAck

Description

[SynAck](https://attack.mitre.org/software/S0242) is variant of Trojan ransomware targeting mainly English-speaking users since at least fall 2017. (Citation: SecureList SynAck Doppelgänging May 2018) (Citation: Kaspersky Lab SynAck May 2018)

External References

• mitre-attack
• SecureList SynAck Doppelgänging May 2018
• Kaspersky Lab SynAck May 2018

Techniques Used by This Malware

• T1007 — System Service Discovery
• T1012 — Query Registry
• T1027 — Obfuscated Files or Information
• T1033 — System Owner/User Discovery
• T1055.013 — Process Doppelgänging
• T1057 — Process Discovery
• T1070.001 — Clear Windows Event Logs
• T1082 — System Information Discovery
• T1083 — File and Directory Discovery
• T1106 — Native API
• T1112 — Modify Registry
• T1486 — Data Encrypted for Impact
• T1497.001 — System Checks
• T1614.001 — System Language Discovery