Done

Malware type

ransomware

Family

Malware family

Profile updated

2026-07-07 16:14:53

Context

Done is a type of ransomware known for encrypting files on infected systems and demanding a ransom for decryption. It operates as part of a larger cybercrime ecosystem, primarily targeting businesses and individuals indiscriminately.

Detection coverage

• 1 YARA rules

Detection rules

• SIGNATURE_BASE_APT_Backdoor_Win_GORAT_4_1 (yara-rule)