GroupProfiles: SafePay.md
Recurso del BushidoUK Ransomware Tool Matrix - GroupProfiles.
SafePay's Tools
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
| Invoke-ShareFinder | Microsoft RDP | Regsvr32.exe | FileZilla | ||||
| CMSTPLUA | 7zip | ||||||
| dllhost.exe | WinRAR |
> [!NOTE]
> This is the list of tools that have been observed during various intrusions that lead to SafePay ransomware deployment.
#### Sources
| Date Published | Report |
|---|---|
| 24 November 2024 | <a href="https://www.huntress.com/blog/its-not-safe-to-pay-safepay" rel="noopener" target="_blank">It's Not Safe to Pay SafePay</a> |