Assembly

Malware type

ransomware

Family

Malware family

Profile updated

2026-07-07 16:01:51

Targeted industries: financial-services healthcare-and-pharmaceutical government-and-public-sector

Context

Assembly is a ransomware that encrypts files on a victim's system, demanding a ransom for decryption. It often targets critical infrastructure and key economic sectors.

Detection coverage

• 2 YARA rules

Detection rules

• DITEKSHEN_INDICATOR_TOOL_Goclr (yara-rule)
• SIGNATURE_BASE_MAL_Earthworm_Socks_Proxy_ID_Generation (yara-rule)