Home > List all groups > List all tools > List all groups using tool RUHAPPY

Threat Group Cards: A Threat Actor Encyclopedia

Names	RUHAPPY
Category	Malware
Type	Wiper
Description	(FireEye) RUHAPPY is a destructive wiper tool seen on systems targeted by DOGCALL. It attempts to overwrite the MBR, causing the system not to boot. When victims' systems attempt to boot, the string 'Are you Happy?' is displayed. The malware is believed to be tied to the developers of DOGCALL and HAPPYWORK based on similar PDB paths in all three.
Information	<https://www2.fireeye.com/rs/848-DID-242/images/rpt_APT37.pdf>

Last change to this tool card: 23 April 2020

Download this tool card in JSON format

Changed	Name	Country	Observed
APT groups
	Reaper, APT 37, Ricochet Chollima, ScarCruft		2012-Sep 2024

1 group listed (1 APT, 0 other, 0 unknown)

APT groups