MITRE ATT&CK / Software / S1137
Moneybird ID S1137 Type Malware Platforms Windows Source attack.mitre.org MITRE last modified 29 Aug 2024 Moneybird is a ransomware variant written in C++ associated with Agrius operations. The name "Moneybird" is contained in the malware's ransom note and as strings in the executable.[1]
Techniques used (2) Groups using it (1) References CheckPoint Agrius 2023
Data: MITRE ATT&CK® Enterprise v20.0, from MITRE's official STIX bundle
(mitre-attack/attack-stix-data ),
fetched 15 Oct 2026 (Perth). Descriptions are MITRE's own text.
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.
ATT&CK® is a registered trademark of The MITRE Corporation.
MITRE ATT&CK terms of use .
