Skip to content
MalwareWiki

Malware

CryptNET

According to OALabs, this ransomware has the following features: * Files are encrypted with AES CBC using a generated 256 bit key and IV.

CryptNET is a Windows malware family.

Background

OALabs notes the following characteristics of this ransomware:

  • It encrypts files with AES in CBC mode using a freshly generated 256 bit key and IV.
  • Each generated AES key is itself encrypted with a hard-coded RSA key and appended to the corresponding encrypted file.

Source: Malpedia (Fraunhofer FKIE).