MalwareBazaar Database

This page shows some basic information the YARA rule Windows_Ransomware_Ryuk_878bae7e including corresponding malware samples.

Database Entry


YARA Rule:Windows_Ransomware_Ryuk_878bae7e
Author:Elastic Security
Description:Identifies RYUK ransomware
Firstseen:2022-12-18 18:56:10 UTC
Lastseen:2025-11-05 08:20:29 UTC
Sightings:118

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter