HavanaCrypt | Netskope Threat Labs

Description

HavanaCrypt is a ransomware family whose installers masquerade as Google software updates to trick victims into running them.

Havanacrypt

Alert Name	Engine
ByteCode-MSIL.Ransomware.Havanacrypt	ATP Sandbox Adv. Heuristics
ByteCode-MSIL.Ransomware.HavanaCrypt	ATP Sandbox Adv. Heuristics
Gen:Variant.Ransom.HavanaCrypt.2	AV
Gen:Variant.Ransom.HavanaCrypt.3	AV
Trojan.Ransom.HavanaCrypt.A	AV
Win32.Ransomware.HavanaCrypt	ATP Sandbox Adv. Heuristics

Signature Name	Engine
MALWARE-CNC Havanacrypt.c2 traffic detected	IPS-SWG
MALWARE-CNC HAVANACRYPT.Data.Exfilteration traffic detected	IPS-SWG