malware family

BlackByte

unknownentity:malware_family

BlackByte is recently discovered Ransomware with a .NET DLL core payload wrapped in JavaScript. It employs heavy obfuscation both in its JavaScript wrapper and .NET DLL core.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: blackbyte
kind: malware family
status: unknown
aliases: Hecamede
jurisdictions: —
claims naming it: 0 · 0 attributions · 4 relations · 0 events

Identifiers

attack G1043via mitre-attack
misp-galaxy 1c43524e-0f2e-4468-b6b6-8a37f1d0ea87via misp-galaxy-ransomware

Relations

MITRE ATT&CK Enterpriserecords thatBlackByteusesBlackByte Ransomware
fetch —sha256 dc1639caa5501d72
rel_10btcintel:relations:10@v1 sha256:2f51adafd0364524
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatBlackByteusesExbyte
fetch —sha256 dc1639caa5501d72
rel_11btcintel:relations:11@v1 sha256:bf28ca7102f17ec5
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatBlackByteusesBlackByte 2.0 Ransomware
fetch —sha256 dc1639caa5501d72
rel_12btcintel:relations:12@v1 sha256:5157116de1f93048
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatBlackByteusesCobalt Strike
fetch —sha256 dc1639caa5501d72
rel_13btcintel:relations:13@v1 sha256:7fd624cf910e1b66
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.