[ALL_FAMILIES]

Payload

ransomware1 mutex signatures

[BASIC_INFORMATION]

FAMILY_NAME:
Payload
CATEGORY:
RANSOMWARE
DESCRIPTION:
Payload Ransomware is a ransomware malware family. It encrypts files on compromised systems and demands payment for decryption. The malware uses a distinctive mutex for process synchronization.
ALIASES:
Payload Ransomware
TAGS:
ransomwarefile_encryptiondata_extortion

[MUTEX_SIGNATURES](1)

[MUTEX_01]
MakeAmericaGreatAgain
ANALYST: @adhikara13 DATE: 2026-02-27

[QUICK_ACTIONS]

[THREAT_INTELLIGENCE]

ATTRIBUTION:
Payload
FIRST_OBSERVED:
2026

[SIGMA_RULE]

[STATISTICS]

MUTEX_COUNT:1
THREAT_ACTORS:1
ALIASES:1
TAGS:3
CATEGORY:RANSOMWARE
Malware profile loaded successfully

EvilMutex Project v1.0.0

Open Source Threat Intelligence Database