malware family

Maze

unknownentity:malware_family

Maze Ransomware encrypts files and makes them inaccessible while adding a custom extension containing part of the ID of the victim. The ransom note is placed inside a text file and an htm file. There are a few different extensions appended to files which are randomly generated.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: maze
kind: malware family
status: unknown
aliases: —
jurisdictions: —
claims naming it: 0 · 0 attributions · 2 relations · 0 events

Identifiers

attack S0449via mitre-attack
misp-galaxy c60776a6-91dd-499b-8b4c-7940479e71fcvia misp-galaxy-ransomware

Relations

MITRE ATT&CK Enterpriserecords thatFIN6usesMaze
fetch —sha256 dc1639caa5501d72
rel_141btcintel:relations:141@v1 sha256:46b2fd0c0a2773aa
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN7usesMaze
fetch —sha256 dc1639caa5501d72
rel_160btcintel:relations:160@v1 sha256:18354922d5aa4d2d
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.