● Malware

Pysa

Pysa is a ransomware that was first used in October 2018 and has been seen to target particularly high-value finance, government and healthcare organizations.

View graph Watch Export

Indicators tracked

Intelligence Reports30

30 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

16 relationships

T1036.005: Match Legitimate Resource Name or Location

source

T1489: Service Stop

source

T1112: Modify Registry

source

T1003.001: LSASS Memory

source

T1016: System Network Configuration Discovery

source

T1552.001: Credentials In Files

source

T1059.001: PowerShell

source

T1110: Brute Force

source

T1486: Data Encrypted for Impact

source

T1685: Disable or Modify Tools

source

T1059.006: Python

source

T1070.004: File Deletion

source

T1046: Network Service Discovery

source

T1021.001: Remote Desktop Protocol

source

T1569.002: Service Execution

source

T1490: Inhibit System Recovery

source