Satan
Aliases: 5ss5c, DBGer, Lucky Ransomware
- First seen
- 2017-01-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:26:18
Targeted industries: financial-services healthcare-and-pharmaceutical education-and-nonprofits government-and-public-sector energy-and-utilities
Context
Satan is a ransomware that encrypts files on infected systems, demanding a ransom in cryptocurrency in exchange for decryption. It is distributed through various channels, often exploiting vulnerable systems to spread across networks.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Satan_Auto (yara-rule)
Related threat objects
- Satan Ransomware (malware)
Reports & references
- bleepingcomputer.com — New Satan Ransomware Available Through A Ransomware As A Service (report)
- bleepingcomputer.com — Dbger Ransomware Uses Eternalblue And Mimikatz To Spread Across Networks (report)
- bartblaze.blogspot.com — Satan Ransomware Rebrands As 5Ss5C (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Satan (report)
- blog.nsfocusglobal.com — Satan Variant Analysis Handling Guide (report)
- sangfor.com — 1094 (report)
- alienvault.com — Satan Ransomware Spawns New Methods To Spread (report)
- bartblaze.blogspot.com — Satan Ransomware Adds Eternalblue (report)
- cyware.com — New Satan Ransomware Variant Lucky Exposes 10 Server Side Vulnerabilities 070Afbd2 (report)