⚠
Tisak
ransomware1 mutex signatures
[BASIC_INFORMATION]
FAMILY_NAME:
Tisak
CATEGORY:
RANSOMWARE
DESCRIPTION:
Tisak is a ransomware family that encrypts a victim's files and demands a ransom for their recovery. It is known to create a specific mutex to ensure only one instance of the malware runs at a time.
ALIASES:
Tisak-RansomwareRANSOM.WIN32.CELANCYC.SMYXDJA
TAGS:
file_encryption
[MUTEX_SIGNATURES](1)
[MUTEX_01]
Global\TisakMutex
ANALYST: @adhikara13 DATE: 2024-08-01
[QUICK_ACTIONS]
[THREAT_INTELLIGENCE]
ATTRIBUTION:
⚠Unknown
FIRST_OBSERVED:
2022
[SIGMA_RULE]
[STATISTICS]
MUTEX_COUNT:1
THREAT_ACTORS:1
ALIASES:2
TAGS:1
CATEGORY:RANSOMWARE
Malware profile loaded successfully