MITRE ATT&CK Malware

Pysa (S0583)

Mespinoza

[Pysa](https://attack.mitre.org/software/S0583) is a ransomware that was first used in October 2018 and has been seen to target particularly high-value finance, government and healthcare organizations.(Citation: CERT-FR PYSA April 2020)

Platforms: Windows

▪Techniques implemented (16)

T1016System Network Configuration Discovery T1059.006Python T1552.001Credentials In Files T1685Disable or Modify Tools T1059.001PowerShell T1486Data Encrypted for Impact T1112Modify Registry T1021.001Remote Desktop Protocol T1569.002Service Execution T1003.001LSASS Memory T1489Service Stop T1490Inhibit System Recovery T1036.005Match Legitimate Resource Name or Location T1110Brute Force T1070.004File Deletion T1046Network Service Discovery

S0583on MITRE ATT&CK →

MITRE ATT&CK Malware

Pysa (S0583)

Mespinoza

ShareX LinkedIn Reddit HN

Platforms: Windows

▪Techniques implemented (16)

S0583on MITRE ATT&CK →

Pysa (S0583)

▪Techniques implemented (16)

Explore Gold

Security Data & Tools

Products

Use Cases

Company

Pysa (S0583)

▪Techniques implemented (16)