SYMBOLCOMMON_NAMEaka. SYNONYMS
win.hexalocker (Back to overview)

HexaLocker

On August 9th, 2024, the HexaLocker team advertised a new Windows ransomware on its Telegram channel. The message included a demonstration video and text promoting a Golang ransomware that implements a proprietary algorithm.

References
2025-01-09 ⋅ cyble ⋅ Cyble Research Labs
HexaLocker V2: Skuld Stealer Paving the Way prior to Encryption
HexaLocker Skuld
2024-08-18 ⋅ Synacktiv ⋅ Theo Letailleur
LAPSUS$ is dead, long live HexaLocker?
HexaLocker

There is no Yara-Signature yet.