███████╗██╗ ██╗██╗██╗ ███╗ ███╗██╗ ██╗████████╗███████╗██╗ ██╗ ██╔════╝██║ ██║██║██║ ████╗ ████║██║ ██║╚══██╔══╝██╔════╝╚██╗██╔╝ █████╗ ██║ ██║██║██║ ██╔████╔██║██║ ██║ ██║ █████╗ ╚███╔╝ ██╔══╝ ╚██╗ ██╔╝██║██║ ██║╚██╔╝██║██║ ██║ ██║ ██╔══╝ ██╔██╗ ███████╗ ╚████╔╝ ██║███████╗ ██║ ╚═╝ ██║╚██████╔╝ ██║ ███████╗██╔╝ ██╗ ╚══════╝ ╚═══╝ ╚═╝╚══════╝ ╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚══════╝╚═╝ ╚═╝

⚠

TaRRaK

ransomware1 mutex signatures

[BASIC_INFORMATION]

FAMILY_NAME:

TaRRaK

CATEGORY:

RANSOMWARE

DESCRIPTION:

TaRRaK is a ransomware family that has been observed in various cybercriminal campaigns. The malware is designed to encrypt files on victim systems and demand payment for decryption. It has been analyzed for its decryption capabilities and employs sophisticated encryption techniques to evade detection.

ALIASES:

TaRRaK Ransomwaretarrak-ransomware

TAGS:

file_encryptionextortioncybercriminaldecryption_analysisevasion_techniques

[MUTEX_SIGNATURES](1)

[MUTEX_01]

TaRRaK

ANALYST: @adhikara13 DATE: 2024-07-16

REFERENCES:

https://decoded.avast.io/threatresearch/decrypted-tarrak-ransomware/

[QUICK_ACTIONS]

[THREAT_INTELLIGENCE]

ATTRIBUTION:

⚠Unknown

FIRST_OBSERVED:

2024

[SIGMA_RULE]

[STATISTICS]

MUTEX_COUNT:1

THREAT_ACTORS:1

ALIASES:2

TAGS:5

CATEGORY:RANSOMWARE

Malware profile loaded successfully