SYMBOLCOMMON_NAMEaka. SYNONYMS
win.cyrat (Back to overview)

Cyrat


According to gdatasoftware, Cyrat ransomware uses Fernet to encrypt files. This is a symmetric encryption method meant for small data files that fit into RAM. While Fernet is not unusual itself, it is not common for ransomware and in this case even problematic.

References
2020-09-01GdataKarsten Hahn
DLL Fixer leads to Cyrat Ransomware
Cyrat
2020-08-25ID RansomwareAndrew Ivanov
Cyrat Ransomware
Cyrat

There is no Yara-Signature yet.