Skip to content
MalwareWiki

Ransomware

CryptoPatronum

CryptoPatronum is a ransomware that encrypts user data through AES-256 (CBC) and it asks for BTC / ETH in order to get back the original files.

CryptoPatronum is a Windows ransomware.

Background

CryptoPatronum is a ransomware that locks user data using AES-256 (CBC) and demands BTC / ETH for recovery of the original files. Its ransom note carries no title, referencing only crsss.exe, the malware's original file name. After encryption, CryptoPatronum appends a .enc extension to affected files.

Source: Malpedia (Fraunhofer FKIE).