SYMBOLCOMMON_NAMEaka. SYNONYMS
win.cryptnet (Back to overview)

CryptNET


According to OALabs, this ransomware has the following features:
* Files are encrypted with AES CBC using a generated 256 bit key and IV.
* The generated AES keys are encrypted using a hard coded RSA key and appended to the encrypted files.

References
2023-04-20OALabsSergei Frankoff
@online{frankoff:20230420:cryptnet:17135c2, author = {Sergei Frankoff}, title = {{CryptNET Ransomware}}, date = {2023-04-20}, organization = {OALabs}, url = {https://research.openanalysis.net/dotnet/cryptnet/ransomware/2023/04/20/cryptnet.html}, language = {English}, urldate = {2023-05-02} } CryptNET Ransomware
CryptNET

There is no Yara-Signature yet.