Netskope Threat Labs

Paradise

ATP Sandbox Adv. HeuristicsAV

Paradise is a ransomware family whose source code leaked on hacking forums in 2021, and researchers have since published analyses of its builder. Distributors have delivered it through exploitation of vulnerabilities in the AweSun remote access product and through IQY files, and a free decryption tool emerged in 2020. Later families such as Rapture show similarities to Paradise, which indicates the code base continued to influence new strains.

First seen
March 2022
Last seen
September 2026
Alert Name
ByteCode-MSIL.Ransomware.Paradise
PWSH.Paradise.1.006CBF16.Gen
PWSH.Paradise.1.07B36B2D.Gen
PWSH.Paradise.1.0D1371BC.Gen
PWSH.Paradise.1.0D3645B9.Gen
PWSH.Paradise.1.12820B34.Gen
PWSH.Paradise.1.13247B2F.Gen
PWSH.Paradise.1.1B8C7B7B.Gen
PWSH.Paradise.1.1BD86F3A.Gen
PWSH.Paradise.1.1BEEFF4B.Gen