Beast

Beast is a Ransomware-as-a-Service (RaaS) platform active since 2022 that targets Windows, Linux, and ESXi systems. It uses a combination of Elliptic-curve and ChaCha20 encryption, written in C programming language. The malware includes capabilities for shadow copy deletion, service termination, SMB scanning for lateral movement, and multithreaded file encryption. It strategically avoids CIS countries (Russia, Belarus, Moldova) by checking system language settings and IP geolocation.