Search/Egregor
● Malware

Egregor

Egregor is a Ransomware-as-a-Service (RaaS) tool that was first observed in September 2020. Researchers have noted code similarities between Egregor and Sekhmet ransomware, as well as Maze ransomware.

View graph Watch Export
Indicators tracked
0
Intelligence Reports30
30 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
29 relationships
T1033: System Owner/User Discovery
source
T1218.011: Rundll32
source
T1069.002: Domain Groups
source
T1574.001: DLL
source
T1082: System Information Discovery
source
T1106: Native API
source
T1140: Deobfuscate/Decode Files or Information
source
T1219: Remote Access Tools
source
T1055: Process Injection
source
T1497.003: Time Based Checks
source
T1484.001: Group Policy Modification
source
T1036.004: Masquerade Task or Service
source
T1049: System Network Connections Discovery
source
T1497: Virtualization/Sandbox Evasion
source
T1059.001: PowerShell
source
T1039: Data from Network Shared Drive
source
T1486: Data Encrypted for Impact
source
T1218.010: Regsvr32
source
T1685: Disable or Modify Tools
source
T1197: BITS Jobs
source
T1059.003: Windows Command Shell
source
T1027.002: Software Packing
source
T1071.001: Web Protocols
source
T1105: Ingress Tool Transfer
source
T1124: System Time Discovery
source