Astralocker

Malware Profile Updated 25 days ago
Download STIX
Preview STIX
AstraLocker is a variant of malware, specifically a ransomware that was discovered by researchers from ReversingLabs last year. It is a new strain derived from the Babuk ransomware-as-a-service, which has been used as a basis for several other spinoff families such as Nokoyawa, AstraLocker 2.0, ESXiArgs, Team Daixin, and HelloXD. This particular form of malware proliferated in smash-and-grab attacks, causing significant disruption and damage. In June 2022, an updated version of this ransomware, known as AstraLocker 2.0, emerged. The AstraLocker ransomware became notorious for its ability to infiltrate systems, often through suspicious downloads, emails, or websites, steal personal information, disrupt operations, and hold data hostage for ransom. However, in July 2022, reports indicated that the AstraLocker ransomware had ceased operations to pursue cryptojacking, a form of cyber attack where hackers use victims' computing resources to mine cryptocurrencies without their consent. Despite the challenges posed by AstraLocker, efforts have been made to counteract its effects. Free decryptors for AstraLocker ransomware have been released, providing victims with tools to regain access to their encrypted data without paying a ransom. This includes a free decryptor for both AstraLocker and Yashma Ransomware, developed by Emsisoft. These developments represent significant strides in combating the threat posed by these malicious software variants.
What's your take? (Question 1 of 0)
5bde16a1-fb8b-4737-b3b4-c5719f6c8329 Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Possible Aliases / Cluster overlaps
It's hard to track cluster overlaps and naming conventions between vendors, so here are some possible overlapping names / profiles you also may want to look at.
IDVotesProfile Description
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Ransomware
Associated Malware
To see the evidence that has resulted in this association, create a free account
IDTypeVotesProfile Description
No associations to display
Associated Threat Actors
To see the evidence that has resulted in this association, create a free account
IDTypeVotesProfile Description
No associations to display
Associated Vulnerabilities
To see the evidence that has resulted in this association, create a free account
IDTypeVotesProfile Description
No associations to display
Source Document References
Information about the Astralocker Malware was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
SourceCreatedAtTitle
CERT-EU
a year ago
Ransomware Actors Adopt Leaked Babuk Code to Hit Linux Systems | #ransomware | #cybercrime – National Cyber Security Consulting
CERT-EU
5 months ago
Multimillion-dollar cryptojacker snared by Ukrainian police
InfoSecurity-magazine
10 months ago
Vietnamese-Origin Ransomware Operation Mimics WannaCry Traits
CERT-EU
9 months ago
Free Decryptor Available for ‘Key Group’ Ransomware
CERT-EU
7 months ago
Cryptojackers steal AWS credentials from GitHub in 5 minutes
InfoSecurity-magazine
5 months ago
New Decryption Key Available for Babuk Tortilla Ransomware Victims
CERT-EU
5 months ago
And that's a wrap for Babuk Tortilla ransomware as free decryptor released • The Register | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware | National Cyber Security Consulting