Big Head Ransomware IOC's Detected

LetsDefend Monitoring Alert

Aug, 15, 2023, 06:20 AM

Event ID: 178

Event Time: Aug, 15, 2023, 06:20 AM

Rule Name: SOC220 - Big Head Ransomware IOC's Detected

Alert Type: Ransomware

MITRE Technique:

T1486 - Impact - Data Encrypted for Impact,

T1059 - Execution - Command and Scripting Interpreter,

T1204 - Execution - User Execution,

T1547 - Persistence - Boot or Logon Autostart Execution,

T1566.002 - Initial Access - Phishing: Spearphishing Link,

T1537 - Privilege Escalation - Boot or Logon Autostart Execution,

Severity: Critical

Incident Responder

45305 Catalina ct. Suite 150, Sterling VA 20166