Makop Ransomware - Hash-based Executable Drop

Ibrahim Saud@tektrix

•updated Jun 20, 2026•0•0•3

Detects the creation of an executable with a 64-character hexadecimal filename, which is a common pattern for Makop ransomware variants when dropping their payloads.