Beast
· Published 14/03/2026 13:40 · Modified 20/03/2026 09:46
· Source: Ransomware.Live
Essential information
- Confidence
- 100/100
- Published
- 14/03/2026 13:40
- Modified
- 20/03/2026 09:46
- Updated at
- 20/03/2026 09:46
- Revoked
- No
- Author / Source
- Ransomware.Live
- Resource level
- —
- Primary motivation
- —
- Related entities
- 1 reports, 12 attack patterns (mitre), 2 malware, 2 sectors, 2 countries, 7 indicators, 2 organization
Description
Beast is a Ransomware-as-a-service (RaaS) product which provides functionality such as SMB scanning, file encryption, service and process starting and stopping, and geographic identification to avoid encryption in CIS countries.
Marking (TLP)
TLP:CLEAR
Labels
ransomware
Related entities
Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.
Reports (1)
-
12 MITREs 2 Malwares 7 Observables 1 APT
Attack patterns (MITRE) (12)
-
T1078 usesValid Accounts MITRE
-
T1490 usesInhibit System Recovery MITRE
-
T1070 usesIndicator Removal MITRE
-
T1021.001 usesRemote Desktop Protocol MITRE
-
T1570 usesLateral Tool Transfer MITRE
-
T1021 usesRemote Services MITRE
-
T1046 usesNetwork Service Discovery MITRE
-
T1021.004 usesSSH MITRE
-
T1595 usesActive Scanning MITRE
-
T1486 usesData Encrypted for Impact MITRE
-
T1135 usesNetwork Share Discovery MITRE
-
T1003 usesOS Credential Dumping MITRE
Sectors (2)
-
Education targets
-
Telecommunications targets
Countries (2)
-
United Kingdom of Great Britain and Northern Ireland targets
-
United States of America targets
Indicators (7)
-
2ce62601491549ab91c9517e0accf3286ed29976f6ec359d31ddc060a8d99eb3indicates -
cf5c45be416d1b18dd67ffa95c6434691f1f9ba9c30754fa6fc9978c1f975750indicates -
479d0947816467d562bf6d24b295bf50512176a2d3d955b8f4d932aea2378227indicates -
6718cb66521a678274e5672285bf208eac375827d622edcf1fe7eba7e7aa65e0indicates -
cc0680de960f3e1b727b61a42e59f9c282bd8e41fe20146ed191c7f4bf9283a7indicates -
812df0efea089b956d08352ff0a7e8789d43862dc3764f4441d4e1c1d1fb7957indicates -
5bd8f9cbd108abc53fb1c44b8d10239a2a0a9dd20c698fd2fb5dc1938ae7ba96indicates
Organization (2)
-
Trinity Catholic High School targets
-
Communicate UK targets