HDDCryptor
Aliases: Mamba, DiskCryptor, HDDCryptor
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 15:42:40
Targeted industries: transportation-and-logistics financial-services government-and-public-sector technology-and-telecommunications
Context
Ransomware Uses https://diskcryptor.net for full disk encryption
Detection coverage
- 1 YARA rules
Detection rules
- DITEKSHEN_INDICATOR_TOOL_ENC_Diskcryptor (yara-rule)
Reports & references
- linkedin.com — Mamba New Full Disk Encryption Ransomware Family Member Marinho (report)
- id-ransomware.blogspot.com — Hddcryptor Ransomware Mbr (report)
- youtube.com — Watch (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Mamba (report)
- Trend Micro — Bksod By Ransomware Hddcryptor Uses Commercial Tools To Encrypt Network Shares And Lock Hdds (report)
- ic3.gov — 210323 (report)
- Kaspersky — 79403 (report)