type:OSINT,osint:lifetime="perpetual",osint:certainty="50",tlp:white,osint:source-type="blog-post",misp-galaxy:mitre-attack-pattern="Exploit Public-Facing Application - T1190",misp-galaxy:mitre-attack-pattern="Tool - T1588.002",misp-galaxy:mitre-attack-pattern="Malware - T1587.001",misp-galaxy:mitre-attack-pattern="Web Shell - T1505.003",misp-galaxy:mitre-attack-pattern="Proxy - T1090",misp-galaxy:mitre-attack-pattern="Encrypted Channel - T1573",misp-galaxy:mitre-attack-pattern="LSASS Memory - T1003.001",misp-galaxy:mitre-attack-pattern="PowerShell - T1059.001",misp-galaxy:mitre-attack-pattern="Windows Command Shell - T1059.003",misp-galaxy:mitre-attack-pattern="Modify Registry - T1112",misp-galaxy:mitre-attack-pattern="Scheduled Task - T1053.005",misp-galaxy:mitre-attack-pattern="Scheduled Task - T1053",misp-galaxy:mitre-attack-pattern="Standard Non-Application Layer Protocol - T1095",misp-galaxy:mitre-attack-pattern="System Network Configuration Discovery - T1016",misp-galaxy:mitre-attack-pattern="Security Software Discovery - T1518.001",misp-galaxy:mitre-attack-pattern="File and Directory Discovery - T1083",misp-galaxy:mitre-attack-pattern="Domain Accounts - T1078.002",misp-galaxy:mitre-attack-pattern="Local Accounts - T1078.003",misp-galaxy:mitre-attack-pattern="Remote Desktop Protocol - T1021.001",misp-galaxy:mitre-attack-pattern="Exfiltration Over Asymmetric Encrypted Non-C2 Protocol - T1048.002",misp-galaxy:mitre-attack-pattern="Data Encrypted for Impact - T1486",misp-galaxy:mitre-attack-pattern="System Shutdown/Reboot - T1529",misp-galaxy:mitre-attack-pattern="Clear Windows Event Logs - T1070.001",misp-galaxy:mitre-attack-pattern="Obfuscated Files or Information - T1027",misp-galaxy:malpedia="Chisel (ELF)",misp-galaxy:malpedia="Chisel (Windows)",misp-galaxy:malpedia="Lorenz",misp-galaxy:ransomware="Lorenz Ransomware",dnc:malware-type="Ransomware",enisa:nefarious-activity-abuse="ransomware",ecsirt:malicious-code="ransomware",malware_classification:malware-category="Ransomware",veris:action:malware:variety="Ransomware",Ransomware,ms-caro-malware:malware-type="Ransom",ms-caro-malware-full:malware-type="Ransom"