Satana
- First seen
- 2016-07-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Last IoC activity
- 2026-06-16 09:55:48
- Profile updated
- 2026-07-07 15:43:08
Targeted industries: financial-services healthcare-and-pharmaceutical retail-and-hospitality
Context
Satana is a type of ransomware that encrypts victims' files and demands a ransom. It typically targets various industries, potentially causing significant disruption and financial loss.
Detection coverage
- 3 YARA rules
Detection rules
- MALPEDIA_Win_Satana_Auto (yara-rule)
- DITEKSHEN_MALWARE_Win_Satana (yara-rule)
- DITEKSHEN_INDICATOR_KB_ID_Ransomware_Satana (yara-rule)
Reports & references
- blog.malwarebytes.com — Satana Ransomware (report)
- blog.kaspersky.com — 12558 (report)
- id-ransomware.blogspot.com — Satana Ransomware 0 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Satana (report)
- cylance.com — Threat Spotlight Satan Raas (report)
- blog.reversinglabs.com — Retread Ransomware (report)