[ALL_FAMILIES]

DragonForce

ransomware1 mutex signatures

[BASIC_INFORMATION]

FAMILY_NAME:
DragonForce
CATEGORY:
RANSOMWARE
DESCRIPTION:
DragonForce is a ransomware family that encrypts files on victim systems and appends a unique extension. It is known for its double extortion tactics and for targeting organizations globally. The malware creates a mutex to prevent multiple infections on the same system.
ALIASES:
DragonForce Ransomware
TAGS:
file_encryptiondouble_extortionwindows

[MUTEX_SIGNATURES](1)

[MUTEX_01]
dragonforce_encrypted_system
ANALYST: @adhikara13 DATE: 2024-07-16

[QUICK_ACTIONS]

[THREAT_INTELLIGENCE]

ATTRIBUTION:
Unknown
FIRST_OBSERVED:
2024

[SIGMA_RULE]

[STATISTICS]

MUTEX_COUNT:1
THREAT_ACTORS:1
ALIASES:1
TAGS:3
CATEGORY:RANSOMWARE
Malware profile loaded successfully

EvilMutex Project v1.0.0

Open Source Threat Intelligence Database