SYMBOLCOMMON_NAMEaka. SYNONYMS
elf.abyss (Back to overview)

Abyss Locker

aka: elf.hellokitty

Family based on HelloKitty Ransomware. Encryption algorithm changed from AES to ChaCha. Sample seems to be unpacked.

References
2023-07-29BleepingComputerLawrence Abrams
Linux version of Abyss Locker ransomware targets VMware ESXi servers
Abyss Locker

There is no Yara-Signature yet.