Netskope Threat Labs

CryptNet

ATP Sandbox Adv. HeuristicsNetskope IPS

Description

CryptNet is a ransomware family that encrypts files with AES CBC using a generated 256 bit key, then encrypts that key with a hard-coded RSA key and appends it to the encrypted files.

Stats

First seen
July 2023
Last seen
September 2026

Alert name variants

Alert Name
ByteCode-MSIL.Ransomware.CryptNet

Related IPS Signatures

Signature Name
MALWARE-CNC Win.Ransomware.CryptNet outbound connection attempt
MALWARE-OTHER Win.Ransomware.CryptNet variant download attempt

References