Skip to content
MalwareWiki

Ransomware

BI_D Ransomware

Small and relatively simple ransomware for Windows.

BI_D Ransomware is a Windows ransomware.

Background

A compact and fairly straightforward Windows ransomware. It encrypts files using a mix of RSA and AES and appends the .BI_D extension to them. It maintains persistence through the Windows Registry, deletes shadow copies, and terminates every process on the host apart from itself and a short allowlist consisting mostly of Windows system processes.

Source: Malpedia (Fraunhofer FKIE).