ransomexx
Ransomware group profile
Description
RansomEXX is a ransomware group known for targeting large enterprises and critical infrastructure, primarily utilizing double extortion tactics to exfiltrate sensitive data before encrypting files. Active since at least 2018, they have been linked to numerous high-profile attacks globally and often demand large ransoms from organizations capable of paying significant sums.
Key insights
- •Employs double extortion, combining ransomware with data theft and threats of public release.
- •Targets Windows and Linux systems with high ransom demands.
- •Selects victims carefully, often focusing on organizations with substantial financial resources.
- •Uses various techniques for initial access, including exploiting RDP vulnerabilities and phishing.
- •Shows interest in critical sectors like healthcare and government for their high-value data.
- •Utilizes defensive evasion techniques, including disabling security software and employing fileless malware.
Threat Level & Status Breakdown
For ransomexx · Based on incidents in selected period
Recent activity
Monthly attack count for ransomexx in the selected period
Intelligence
IOCs, YARA/Sigma rules, and related families for ransomexx
- 41aa7cdd6c9ed2ac0932d8084c89f28f
- 2e1cb6a2cb1b284dbdd0b8d47d53f946ca0b27a196c45600cc656889c2e57623
- fc5d66710026b5fbe5d6e749d5aaa837
- 42b07d1fbeaf2f3ca388f0bcfb0587a0
- 4e9c2ba1f6174baf4b122db38293edf3e3d6907c23b87bb6ee265b5a1cb6e487
- d8be60ff114215bac71a7be4857c81dd72005a1a0c10937431284eb327f19548
- 2e4d5b0fee977939ed85aafb89cc40f8b2350385
- e6327d80d2f00f9c702f93212eb7de1be40d8a14e439afc5fff4a40707bbf1b3
- 54747f7dd201b64853b39f691fa19614f383335916e67abfb74fb09c1b2d2c25
- 00020acf5bc8a50fc0e5173059b073e1
- c710e15d91756124d8d6755d2766ff4b
- 8f22a527ee1c60a7d3112272ade8669a
- b7b75c2275853615e43eb1e0c9d48fe4
- a7c511c31db0c7d738c9e480a49bc2cc1b0a20ab2619c7da6c37c07d8c8ea0f2
- 3edd00245d93664a33a724ba377150e5531ed033
- 454ae9e334b61699ba3a877655be4cab
- db6c548f11916c2c9558417153aa2b30
- fb108c52fb0bef1584639e97436d9630
- 36e91497fee355a45a5cb23a5ea91139
- 45109eedbcf92c79b4a77eeebe8c5055a009e5f7
- 54d141eb585f38fc83a1dc15aa281a84c0416d4f
- 8369b9dea588975bc7238a663c62a8d7d67929fe5636ed1863062b0d0f71452e
- d3059ba9bb57e3d81d6bc3f6028bc9ff
- 11b8beaa53353f5f52607e994849c3086733dfa01cc57fea2dae42eb7a6ee972
- 94385d29fadad90eb36490db68fd5bd5
- efa06bf605561fe4767868ea567b21b6d140b46b0c6e06eef54d7f8db1401666
- 6b31a0eafa7cecab1514fbf2d98889810cc898f54aeae45d088e8e3a2ba23fb9
- fdcebfb47e38e66f673cb01c308c73b421cd9a2ba84e1c55e42a5f580ee68fe3
- dabba6e10ff0790c198be0545d1bb330d88b820c
- 0a81ec5a929777f145904af38d5d509f66b5e2c58fcdb531058b0e17f3f0b41b
- 2887127ea53a5363e7bda7dfbd657a7c
- 56c79acfe789e8ba09e2c3a560388bcb
- f2118c92e9d72e0928c713fbd33f5ff7633b9ea3ae9c568b4e02f303a1833046
- d0430edfdd9dfd5763692282e409643073acc184
- a1cf03e58b6e20e1f606c5448251774d
- 329793be7fdce2d571652aa1fc1710381542a02c
- 90572bf7c3f21b819b0d496e7ba1f92e
- 7acb191103131e2ccf466bc59a4948fe3114b310
- fb57ae3048b4f62b3072ceb7651af451493314e4c48883b2f53912b262abff78
- e047aa878f9e7a55a80cc1b70d0ac9840251691e91ab6454562afbff427b0879
- 2fb78701923aea361be5267ad452d4b576d50b7d621852faec6a19ac17eb1094
- 7dc1a90767dcfa72ae52396b0b599bcb3841a46a278df89d3b56068e21cde5e0
- fadd3aebdcdf61da44bccf7b71f30312c807c432514b761010aef10ddaf93270
- 4dd92b90ca0fdbcf3b83e4de519de17126a46efb8a2f8b11dfe4cd917e66a5c7
- c84f04f135289db320d05603723e50f0062a211692f055107c7e7dbd14e3292c
- cd674d6aab60773d6af8554cbc28e902221aeec9b9734c98bb5a1a836c2f166c
- 94dbbd74643f9cb7f362510425e66b198f72109531142346200b9cddaa1b6a20
- d3902f1f9a03a12391c83717074693cf320929d5b47674c0ed45687e3093d45c
- accc2e4de7d9c190b6b0190ef2e8538cba735301b8329a0939fc8b39715004fe
- 2ceb5de547ad250140c7eb3c3d73e4331c94cf5a472e2806f93bf0d9df09d886
- 90dc8ac7ccb5e975b13c801e30434c7c
- bba3ff461eee305c7408e31e427f57e6
- 51850970637036891c243c2b940feee70e9767b11ffb37def81caeff38f2567c
- be9602f2673fcec5b325bcec150650367e454af4
- b0f4262fb225ec0d6f283749c34ba0f1
- bb3de5a8cf25320d3f5e730b37deca57
- d0b66681e723c2b320d9bc76999b5990
- 8917a41922f62c70b7dbdc8c191226a5
- 5e9c03a81e1d0b7b307e4f0bed7ca6ec43ab4b233b957a772d5a2cfd6c31e358
- 6a2a192266c601f1f1596b5251d3282c055df136b242cb715da75809702a54b4
- 2cf7ed378a3cc6e7264c5e76daedc35efbb717a1
- f1b1e1267a9301244120ef7d47cd4174fd94fd60
- 5da1360295132675024820ab37f9bc1c658f6b90
- 21d780933d9124ce4c262c005303387a9a0bd7919c46fcc51a4245f91591e933
- 17d6efab9be7286a9fb253ed1d2f315cf9d52a70032debab94b89867965a06c7
- 83b285e0fae84bf050017cdb53ec1298
- c67ad0bb292ed20dbe9ba980e71d223249632252
- 40477bfa454f9bfe34f898dc2aaf5e74fd77de0bc367db6e6babed3d37c8dc76
- 98fb7574932dbd6fe9e75169982edfba50f86175
- f0d0221b7ec0cdbbb64fde8592c3307d
- 99085c10577b619b8bef0201693741e0caa12247f07c0c8cb0a5a88637aa94f1
- c0a2f54257b6cccb2a40db1cd4ca2bb778c1ef3a
- cf703784fb89841fba60456f3b799271aec69ef3182fb1ac76f025a0b69570f9
- 04461a6b8ac0fea7f089d739aee9ed081d9a1fa30c837214ef3cd50e60be0804
- ccb78358c06111ff4c3a6d816974a9091442343322f15e66f797c24d7afb1b18
- 05e1247ff02d50aed81ecd9d0b93c41c
- 27ca24a7f6d02539235d46e689e6e4ac
- 3a276e8fef7277cec3bf8301545363848f150d5428f61c5891ace7ec6e5755f0
- a208e475ac184f68c5c1b14a4ecf0c241f15b946
- 6aa004fad1ddb15eefda85cfebd908f8
- 07974d2e81c6b645feee15a25ce2dfda96e63e23a072405bf3234c901ab40449
- aedb2e969df9c753cea46699fb7b2782204fbc9f78ac510c407e43015b266a39
- d62b67d54389f618a59ddd98ec2f9bd564b96a89
- b6b406ef974c608c8c49f5f1f1fbc01e
- 05cbef6bd0992e3532a3c597957f821140b61b94
- a121a2d5193e426c19e373450087173f
- 1032f9e96a249c12f2f6d42678264114
- 7b5cb205fa3239a5ad6e698b6c42f64930cb4f1d4dd53ea6bf37bd4de76e46ee
- 4372694c68edfd91c70dc888f46a7d7078be7ddfa0f35e8c4119141656b29ef5
- d3ae71df4468275671c0033bd62cab98ad0466ae
- 24181daef5c5180727b15f6d441bbe1969cb12de
- 534e6376ded27973347235113f32888dc68d826b935c7057e13ffc096b652d65
- c61a987d8c9384aa183aba4141b1113bec7d98b79f5c25449cf9aabb1ee84981
- 0a39d498c453699cde26fb6088d9e008
- 1ee842a4721e1ed153fa7c0fd51ab9e79671a4e5f272690ae285eef8ba2f066d
- 3bb9a02d2dff194eee3c9f79d3a26fb451e0f24a
- 8c8a2a97273bd3ed5492cec9899a6e53188473c4
- 9e8afdfbd59138153f194df803132f4b6f16250ce0c0d0dbefdb89345f313d43
- db7d1545c3c7e60235700af672c1d20175b380cd
- fb5ea246f1ad341a9c8dcafa9b731572b1f6c7d8
- 90264ca28463bee4dbbd207b1d2198c313a56b65
- 000058912f24a48b315b5136729646fffe02451ae1a5dfb4c6b89af864aca0b0
- d141ec71b5b9443bc23b64c43ce9c36f
- e8d20935dd2e3324bdcc43c51e6d2d9fccac41bc
- d55e4133d9df7f3f419968b08360ceab338ca82d677f057842c51e49c4bd42a5
- 3ef1cff87dbe65ab79ed8bd3dbd1a4912738856db4ee31e5be91976dae981227
- a04f32c0c25dfb268021a7419b299d0f
- 7dd0c170646874ae707f56f9921262ed
- 6471546dc9adbca46cb794a4123dbccd2887b7f2
- 87d894539c316bd1f08470c9e168d8a9d172ba5c
- 7654329d582bf2b265b4721b0717616b67f11414
- 9b112086f0959b5e5cec48cc3f7a0505
- 9c9e435482bb1b19d21547f9f8f8f9028277425a2b8a77b7c80c0c7dd9204b0b
- 62731c7d44c217b79724cb23bef4267570332ed67c1c1feef3f6c803a6f57ef3
- e3443f121eaf46eba488c6391bf79d46
- c98c131eba549ee3f0aac2376c5a28c2
- 1b7f9a43cda4aa79776a7d53d3e479752ddf28e4
- e2382ee74c3cd7876eaba0c8451f5915db182beaefff8b267e8a5258ca8935f4
- 92f1e5424d53e3f4516d4c831afe3d64e88ed265ec143fb32717f2323836d61b
- 017c1b29cc9e28ddc5615617d9b08bba0c142a2382533bf8e19f6e038483d209
- 6824291a164f24294f5cd5be8404110b
- afef0300296fff7b32ac8fe2e2ce31eb
- 363a21c7185ba0c677cc60a7a88f541563858a5c3dcc124765238fddae5c9c50
- 8c8a2a97273bd3ed5492cec9899a6e53
- 493698b1d7acfbf57848b964b4b0ae97
- 263bc3729f5785acb6647af950f3fe0a0cbbe05d2fcc9639276852ba39ecbaa2
- 0001855facdbf50a9df1fd7cd7046a709025b5e8b1fb26933749511830b10e77
- 3f68f3cf4f9824d77ed3b0da9bdfc1ff
- 24e837cfd43d6ce05c441ecbd1f68209caf340fa24340f8c4d9089aaf72898d1
- 16f2d0aba52a1d74a82399c619f553f27c9fb369
- d4bee089ae9997667c5ebe728f2e115035f55b148d06000fae035f6ae3ea6cf5
- 42d74dd142cd2f8183f285a8aa793b38
- 00019e4f44b52d1b432c2b2a3a9110f83da2d1e192e090b5645f8ac9a16e13c2
- 7a1c5e1799bdeebb01527f54a7fd89d0b720dea7
- 962905fc4e28a05ecfc483db362996cdb400bb2b707b3e34d269bfc5d79bac49
- 0348794d9739b4970f8c3b14683b2e4996133613c0e21df7660fd95598269cee
- 4063072f146c9fc42efbfb902d781f6a3652a199e33f477915ed5177cc6acbbf
- 9fc5747d13dba47dd7d9fdfe2aab6f2eeacebb21b5a34c0939a669b868551f24
- 7e1e7dd4e1653d07918018b40d3a6b75758c8f36
- fcc4c7e7e6bd5bf05e9b5ce4ccd5ecc9a9ce7cb2
- 2e280a00030073629fd21f2b44767e80815f12bde2a714b077192c51c8649b48
- ce981692d287069861fb3f330662c4efd15c44d229aca87e36c80205d2651632
- f761511a70e320b8c596af699652550c86b366d29e764e8cb39a95a5de1bb4d3
- 3b137f7a128a47544505f2636b526181b5eba69773f8c820353ac93f690d9a74
- d816b83c0130ccd265300393b0567fa51b7e9053dd41f71086584ac5d06ac4e3
- 25a854bedf0a3c6568fbd41d8421ec1fc2c28db32e94d33782d4cf22db2f096d
- 4fcb2eec73688c04e2ff7d61a6bc1fa95bbb6bf9
- f33f75a8bcd501338911e890ad61b4a7
- 9a5873233f302732de257f4c2f6259ce22a854a9
- 0d9f585d1ad9e75f90175863a502856da7a7d89a
- d4988878a2c4cf9432225945750001c2d16ff91f6e9cd58d97a773ea13afbc68
- 119f879a572bcd3dbf1aa3997fb122abda72df47c2a4cce6fc4ae5a7fdd9709a
- 6249a40d3361dec186a4fa354821e449
- 5ba9f7cd51e8eac88f870e340c8262683d92563d
- 04c861afc36c121ab9a65ae8a324b7477a3d5293294e484396eb83d42fc40456
- baf2dc9638920be8517cf00fd3780bd2cd94c1c93c4fd27fbca6f20768c1513a
- f6fb6990ca687c9a7ba735335b3fcd0e6b5d662831bb717051fbb884c72ae40d
- 62cea31202372204a65357229db0027464a1f4de
- 1b15f7ff7cab771f956ec6c66bf46cb3facdcf2d
- 0000d73638e82136ce4b8cad394362efdfa8f8a85538f5cc899084e066689858
- ecf07794f84e99075cf160be5c9a6f0e80bc2bf2f167c9aa31fca6b181e8b115
- 6ce5931bdb68560d576929525d3fb27ee7d0d9c2471088018f3412f75a93f41b
- bcbaa53dffa0965e557319f4f2155088
- 8715353567e4c5f53ca1663a7778593c1fbd9d0e5a52d27d3b476d9f75815fe2
- 62d93cfd8f1ad89c57e3e01c499406b9d5db9a7cdb534ea8a887015a973e7675
- 9fdb51761a71a36579ee5ec54c3abb14381342ba98c980ebdc70669de4037d75
- 16f30a4d512ef27a88aecc7b1a53bb76e68bcb45
- 57049d54061e1133a2869207edd0be45
- 3b91adffa027231c632cff0d715d3c768518e09f4b7b6e5199a36e8825adccdb
- 4a647cbecf425627bd15b5f508d75fbfbf8506c2
- ac09f126b76f5ee447535a2300f1607c
- 06941e02a01ed17d12679f805fafc1504decc3d0dc503afbd524e604185d686c
- 9030a329eb0f97374a6e438777e9c38a
- c3bd41fd41e2a5ab8dbf86d6f7b206efebc2e14abaef2bfc62708f46d4c9a50b
- 2bd407f7905fdb060449d467906084a5e96c99224a8395741730fe1a95bef8cd
- 289821087e1d53824ae1caa95a161181
- 84fd1c56301fc599f91a7158e5760bd0
- 249456bf12551ac792bb8c3538406f8bcfc853d382a0c23956d96c4eb054a429
- 1cc16e3a6185b790875e3f00b68ec87feddcf93f
- 5a034253d7db84918eb7a581a365d871
- e663bb4d9506e7c09bcf7b764d31b61d8f7dbae0b64dd4ef4e9d282e1909d386
- 95fa9e39bbaf8239e72142f6b931176f
- 0f8e66b41e930335fa661b03299b12d6e7d8f04e7e35a117cb6966b9d1258497
- c511853d2df7a1c91ac2150f3f4973c1606db8f31a3aa5c676528c1779bc21a5
- f3b96e02b3fae43897a74736796febd8af5c702224163c9e21ad8197b07311a7
- 88adb7aba69b32e3f3c8829b6d20934d
- 5fc1481ea239bf70df9878f9111e445f
- ccc8384811bbd4380615e47da8a794cddd63ac3268a1ae4215a159accc3107a1
- 2db5c364874d224e76e0063740e76e2774959ceccc889d402e15e377cb723785
- 99116e45392e9e34bba6362983a96f33
- 64071aaa193ab18722553bf6f573547b
- 639e0ae950e508dd8b27ecb200ce86f1
- 1beb2bb7d2fd0b1c6349a893c8202d0acd1be34efac5014ecd95da36fbdb0c6a
- 94f3cfffb2697397b9032f449a8db61747083d11
- fab0c4e0992afe35c5e99bf9286db94313ffedc77d138e96af940423b2ca1cf2
- 4ccbebfae23c5ad14ed78a9efe1685b760c1c0f620c810a3744fca839fd8a17e
- 2b3df22cd3fd54bdbb6e979b4c48b646
- 3a06923f31cca1bebe2cbe45914a30c4cc763bb3
- aac2d93191f528f22718dcdbcf0764ded17547bd
- 8d6b51dfabf5a490b4312733d0ef5852
- 96c2bbda4f2f318a82e85374a9eb3d3516262304
- f2751dbfe822907ecb69b83e461b48183a485355
- 4ae05051c30eba75cec96f8977fb7b42
- aa4348973e49963f58d9cae187a08099abf2656c9bb777af4d2de6eec4513ea8
- 7ccee16894bac90ef3f50df56b047e1607319a51ff9a9c350bbeed8cd59b6694
- 9fdbd76141ec43b6867f091a2dca503edb2a85e4b98a4500611f5fe484109513
- 87b1ebd877cde3b8c11d80fc71340cd9
- 9c1106556d728784938a318cc93ea1f4
- b3b6ff1dfdd6a1b625bde31568644e0fce6ccfe67027f5cafb3db81305b79918
- ffb4e833419d2e4101d24d72b6fb2369
- e8e12acc9600677cecbfc09f17919354c9bcd6648f3e579abc5a4a99408c95ec
- 99162043df3aee422e2c569e017ed341
- 43cd38a962aa63091260f2648304b22e01aea8ea79c23ca16f99d17133f1ba20
- abb0d9ca3c752f85afff45a91d060c66
- 87a80ccf68d81d0189921c68f7fb2022
- ecb6186a5e722fa360ece37191589305858a0e176321c9339831f2884dcb0405
- 9e27f110fc824d8b85855538c3320e8ea436e82737d686fcecb512b6f872e172
- ce9a52720ce72a75001fb58bd17c1b6b
- fc0b57c9aeace40ef8e3533dba339371af7a5492e533b8e7f545ebf0549fa6fd
- 5a2fbefccac3bcf330ed6f5c57372e5056817094
- cc2888616c3c1f723d682ca71c3579ce
- 981119429ffff9f3ac4419c91db6cb309952afe1dc159596ed5466dbca783987
- f1d54b331fc54c33995cc496f8211160
- ca3d163bab055381827226140568f3be
- 859a39512d6d55d16c6e7bc6b7445e7b5b022fefe1696e97d7945d29b8cf5712
- 433465231587f097e1fd8ce067d1f0b6443283a4
- 37be65842e3fc72a5ceccdc3d7784a96d3ca6c693d84ed99501f303637f9301a
- 883590e1a1ee677a37d28c8b5c429d0641814a21d59a1999f354fa2ac3193370
- f267d077b0aac137e7f9bf3c967a31db
- 31fb8b619b3aec1857ff5c346cb341fc027d83b1a875dc745a374f7d9cbcae3a
- af99b482eb0b3ff976fa719bf0079da15f62a6c203911655ed93e52ae05c4ac8
- db35587163825c193667dc3744cc82e07d2247fdd2002977902b19a7eea5f49b
- 006d91f444545823882a9a18b932ba241c334b32db67bef2af9daaca83d58571
- 3248d9c177fc51ff0ea79ec5cfb4b8b29376a1a3a153d801aff21fd4a1ac998c
- 48b9f20168267357e9dd911cf0941f20a95494bc4e6ee82e1755d746badc9226
- 012b95505ade32ba1f20cf4464dd65681cd263dba63b7ec511f037c719659951
- 2a83451137268353c6de7b67c048384b8515a399
- 9db1709d693633bb2c43eb91ca4b1fc353ddc3950f636158f582fde5f9e6d5c7
- c7f82a5305f6a7c054edf1242ee6f1fe
- 4d769b5b480b04b7a4954dd599a50633
- 49a9e15af243073fb67efc840f4b7d2e
- 7a1280e94423cd41f75fa7c489f672cf
- 6bd700aaa48f0c3932350e2e0f39228b
- bb7fe7fb6c1f314e78b8599468a68d61
- 0bd91c1024ad3948e841d597ea653a80
- cecc1ff55dee021524bdd7f4b5c04a94d0624b70bebc51f3a648f7ebb377806a
- 2f9d32c124a59e77c5171f25ab588c5ae2de2ef18172eaa185b746ac23848414
- 095baefbac7d3357b5dee241a02deb856c18027310c32b8655de849a2f88bc8a
- f0c1a8cb2dc45b218cef53ba5b05a34f30e71e4d
- eef7a2656cda4a7cbda63323b391d632312b72f59391604ce17286bb3a66ffcf
- 09f630c7ab026ab71ba8b4be988fa2b48f901343
- bb3a8b5f6e6f35a61b31ae24f78242e7
- 0f01bfe2c687159aea8dd3b706f1e16d69c10420c4c022e865388548e86291ae
- 9ad808caa0b6a60a584566f3c172280617e36699326e7425356795b221af41dc
- 61a54041ac377e822d3c0439d3c4570efa07016328aa60c28a1004fa4d63662c
- d9832b46dd6f249191e9cbcfba2222c1702c499a
- 4e4410e111dd697e3affdac5bad8340663a7466bfe6d036323e5767a8f706930
- 95e61f016310bf3944d81940d2e08a0cac0b5c1956e84c734d25fd977f7d2047
- 0f3645cc21bf1f38c405100f526d3650
- 1a3f1d9ca89939729f78a83cab4f483b1475c7e4135ec2bde75edee1801e5ac7
- af5f250eab105e11611ca818c81cdd067abc0cd68f1100af4fb5025b836dea12
- 47cde09db5ad9b2cb353eba908a3e2a7
- e539f8f294aa4d06ee143f7200163b1673580b918f1ac6785d53ef16c347198b
- 11ecc3c8fd654f68f888b57cb2de382fde730014a3a21027f9f3c010684868b3
- 507df697c984b082b842d1577ce2afa0
- ae4ceb2cb3d5edd7edffe015b1f4d102
- 95822b98d1cc4e9454ceee16688ce7f3
- bfe2673b02c54be9093cff8fd564b630109175c608f07d94e4a2ac65028a6eae
- c6d2b49143145483a837febca0b3c918
- a40673ba3d6e7d0235735860630fb2a76e0f22efd18ced81849f451b76f2fb4d
- ba8f4785f5f5dbc250eee7402e3523ae3115402e93352c70b41936fdf044390a
- c84b8a8aa1a22b6e48130b2330f9d88c6a66558058fcc83e877cabe169398250
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for ransomexx
T1486
T1486
T1490
T1490
T1080
T1080
T1078
T1078
T1557
T1557
T1021
T1021
T1562
T1562
T1040
T1040
T1105
T1105
T1071
T1071
Victims(2)
| Company | Domain | Country | Industry | Status | Discovered | |
|---|---|---|---|---|---|---|
| SOGO Auction | — | JP Japan | Professional Services | Claimed | about 2 months ago | |
| GoTip | — | JP Japan | Technology | Claimed | about 2 months ago |
Affected countries(47)
Countries where this group has been reported to target or leak victims.