Netskope Threat Labs

Xorist

ATP Sandbox Adv. HeuristicsAV

Xorist is a family of ransomware that encrypts files on infected computers and drops a text file demanding payment for their restoration.

First seen
March 2022
Last seen
September 2026
Alert Name
Dump:Generic.Ransom.Xorist.98698F28
Gen:Variant.Ransom.Xorist.109
Gen:Variant.Ransom.Xorist.153
Gen:Variant.Ransom.Xorist.79
Trojan.Xorist.1
Win32.Ransomware.Xorist