Phoenix
Sigma IntelligenceBeta
Emerging Threats
Malware2020

Maze

1Rules
3References
1Folders
2023-02-13Latest
Summary

Maze is tracked here as a malware family or toolset with 1 Sigma detection spanning 2020. Coverage centers on windows / process_creation.

Related Detections
Search this threat
Emerging Threatcriticaltest

Potential Maze Ransomware Activity

Detects specific process characteristics of Maze ransomware word document droppers

WindowsProcess Creation
TA0002 · ExecutionT1204.002 · Malicious FileT1047 · Windows Management InstrumentationTA0040 · Impact+2
Florian Roth (Nextron Systems)Fri May 082020
References
1
Resolving title…
fireeye.com
2
Resolving title…
app.any.run
3
Resolving title…
app.any.run