Mr.Dec
Aliases: MrDec, Sherminator
- First seen
- 2018-05-15 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:45:30
Targeted industries: financial-services technology-and-telecommunications government-and-public-sector
Context
Mr. Dec ransomware is cryptovirus that was first spotted in mid-May 2018, and since then was updated multiple times. The ransomware encrypts all personal data on the device with the help of AES encryption algorithm and appends .[ID]random 16 characters[ID] file extension, preventing from their further usage.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Mrdec_Auto (yara-rule)
Reports & references
- 2-spyware.com — Remove Mr Dec Ransomware (report)
- id-ransomware.blogspot.com — Mrdec Ransomware (report)