███████╗██╗ ██╗██╗██╗ ███╗ ███╗██╗ ██╗████████╗███████╗██╗ ██╗ ██╔════╝██║ ██║██║██║ ████╗ ████║██║ ██║╚══██╔══╝██╔════╝╚██╗██╔╝ █████╗ ██║ ██║██║██║ ██╔████╔██║██║ ██║ ██║ █████╗ ╚███╔╝ ██╔══╝ ╚██╗ ██╔╝██║██║ ██║╚██╔╝██║██║ ██║ ██║ ██╔══╝ ██╔██╗ ███████╗ ╚████╔╝ ██║███████╗ ██║ ╚═╝ ██║╚██████╔╝ ██║ ███████╗██╔╝ ██╗ ╚══════╝ ╚═══╝ ╚═╝╚══════╝ ╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚══════╝╚═╝ ╚═╝

⚠

Bluesky

ransomware1 mutex signatures

[BASIC_INFORMATION]

FAMILY_NAME:

Bluesky

CATEGORY:

RANSOMWARE

DESCRIPTION:

Bluesky is a ransomware family that encrypts files on compromised systems and demands cryptocurrency payments for decryption. The malware uses sophisticated encryption techniques and is designed to evade detection while maximizing damage to targeted systems.

ALIASES:

bluesky ransomware

TAGS:

ransomwarefile_encryptionevasion

[MUTEX_SIGNATURES](1)

[MUTEX_01]

Global\EA408C6BF0D12F526F821798C3F54C9A

ANALYST: @adhikara13 DATE: 2024-07-19

REFERENCES:

https://app.any.run/tasks/d537c305-659f-4ac8-86b5-92f79b951763

[QUICK_ACTIONS]

[THREAT_INTELLIGENCE]

ATTRIBUTION:

⚠Unknown

FIRST_OBSERVED:

Unknown

[SIGMA_RULE]

[STATISTICS]

MUTEX_COUNT:1

THREAT_ACTORS:1

ALIASES:1

TAGS:3

CATEGORY:RANSOMWARE

Malware profile loaded successfully