[ALL_FAMILIES]

Hydra

ransomware1 mutex signatures

[BASIC_INFORMATION]

FAMILY_NAME:
Hydra
CATEGORY:
RANSOMWARE
DESCRIPTION:
Hydra is a variant of the Flamingo ransomware family. It encrypts user files with AES+RSA and demands a ransom. The threat actors behind this family call themselves 'King Of Ransom'.
ALIASES:
Flamingo
TAGS:
file_encryptionwindows

[MUTEX_SIGNATURES](1)

[MUTEX_01]
Local\$hYdr4Rans$
ANALYST: @adhikara13 DATE: 2025-07-13

[QUICK_ACTIONS]

[THREAT_INTELLIGENCE]

ATTRIBUTION:
King Of Ransom
FIRST_OBSERVED:
2020

[SIGMA_RULE]

[STATISTICS]

MUTEX_COUNT:1
THREAT_ACTORS:1
ALIASES:1
TAGS:2
CATEGORY:RANSOMWARE
Malware profile loaded successfully

EvilMutex Project v1.0.0

Open Source Threat Intelligence Database