Mal Ransom Sinobi Generic Mar26
Detects Sinobi Ransomware (suspected Lynx rebrand) payloads based on specific command-line arguments, help menu strings, ransom note URLs, and references to Curve-25519 and AES-128-CTR encryption routines.
YARA

Detects Sinobi Ransomware (suspected Lynx rebrand) payloads based on specific command-line arguments, help menu strings, ransom note URLs, and references to Curve-25519 and AES-128-CTR encryption routines.

Already have an account?