Content available in original language
class="post-article">
Ransomware C++ Active since 2019

MazeRansomware

Maze Ransomware - 2019-2020 yillarinda Fortune 500 sirketlerine buyuk capli saldirilar duzenleyen gelismis ransomware grubu. RSA-2048+ChaCha20 sifrelemesi, WMI uzerinden VSS silme (cmd.exe olmadan), double extortion (veri sizdirma + sifrelemesi) teknikleri kullanir. 2020 sonunda faaliyetlerine son vermistir.

Threat Profile
Type Ransomware
Programming LanguageC++
C2 ProtocolHTTP
First Seen2019
Targets Kuresel/Kurumsal
Purpose / Capabilities
  • Ransomware/Double Extortion
No C2 servers have been identified for this family yet.

Research Reports (1)

Kritik

MazeRansomware 4263eacd -- RSA2048-ChaCha20 DECRYPT-FILES-txt WMI-Win32ShadowCopy-delete autorun-inf-USB InternetOpenA-HTTP-C2 CryptAcquireContextW 1-section-PE | Kritik

MazeRansomware 4263eacd PE32 x86 920KB 1-section. RSA-2048+ChaCha20. DECRYPT-FILES.txt. WMI Win32_ShadowCopy shadowcopy delete (cmd.exe yok). autorun.inf USB yayilim. HTTP C2.

Read Report →