SYMBOLCOMMON_NAMEaka. SYNONYMS
win.cyrat (Back to overview)

Cyrat

According to gdatasoftware, Cyrat ransomware uses Fernet to encrypt files. This is a symmetric encryption method meant for small data files that fit into RAM. While Fernet is not unusual itself, it is not common for ransomware and in this case even problematic.

References
2020-09-01 ⋅ Gdata ⋅ Karsten Hahn
DLL Fixer leads to Cyrat Ransomware
Cyrat
2020-08-25 ⋅ ID Ransomware ⋅ Andrew Ivanov
Cyrat Ransomware
Cyrat

There is no Yara-Signature yet.