สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency

Report

Home > List all groups > List all tools > List all groups using tool HermeticRansom

Threat Group Cards: A Threat Actor Encyclopedia

Tool: HermeticRansom

Names	HermeticRansom PartyTicket Elections GoRansom SonicVote
Category	Malware
Type	Ransomware
Description	(Kaspersky) On February 24, 2022, Avast Threat Research published a tweet announcing the discovery of new Golang ransomware, which they called HermeticRansom. This malware was found around the same time the HermeticWiper was found, and based on publicly available information from security community it was used in recent cyberattacks in Ukraine. The new ransomware was likely used as a smokescreen for the HermeticWiper attack due to its non-sophisticated style and poor implementation.
Information	<https://securelist.com/elections-goransom-and-hermeticwiper-attack/105960/> <https://www.welivesecurity.com/2022/03/01/isaacwiper-hermeticwizard-wiper-worm-targeting-ukraine/> <https://www.sentinelone.com/labs/hermetic-wiper-ukraine-under-attack/>
Malpedia	<https://malpedia.caad.fkie.fraunhofer.de/details/win.partyticket>
Playbook	<https://www.bleepingcomputer.com/news/security/free-decryptor-released-for-hermeticransom-victims-in-ukraine/>

Last change to this tool card: 27 December 2022

Download this tool card in JSON format

Previous: Hermes
Next: HermeticWiper

All groups using tool HermeticRansom

Changed	Name	Country	Observed
Unknown groups
	_[ Interesting malware not linked to an actor yet ]_

1 group listed (0 APT, 0 other, 1 unknown)

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Report incidents

+66 (0)2-123-1227

[email protected]