Bad Rabbit

Bad Rabbit is a self-propagating ransomware that affected the Ukrainian transportation sector in 2017. Bad Rabbit has also targeted organizations and consumers in Russia.

View graph Watch Export

Indicators tracked

Intelligence Reports30

30 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

16 relationships

T1053.005: Scheduled Task

source

T1218.011: Rundll32

source

T1548.002: Bypass User Account Control

source

T1036.005: Match Legitimate Resource Name or Location

source

T1204.002: Malicious File

source

T1135: Network Share Discovery

source

T1106: Native API

source

T1003.001: LSASS Memory

source

T1110.003: Password Spraying

source

T1057: Process Discovery

source

T1210: Exploitation of Remote Services

source

T1486: Data Encrypted for Impact

source

T1189: Drive-by Compromise

source

T1569.002: Service Execution

source

T1495: Firmware Corruption

source