Scarabey

Aliases: MVP, Scarab, Scarab-Russian

First seen
2017-06-01 00:00:00
Malware type
ransomware
Family
Malware family
Last IoC activity
2026-07-20 00:38:34
Profile updated
2026-07-07 15:19:18

Targeted regions: country_code:ru country_code:ua

Context

Ransomware with ransomnote in Russian and encryption extension .scarab.

Detection coverage

  • 3 YARA rules

Detection rules

  • SEKOIA_Backdoor_Win_Headertip (yara-rule)
  • CAPE_Scarab (yara-rule)
  • MALPEDIA_Win_Scarabey_Auto (yara-rule)

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Win.Scarabey (report)
  • id-ransomware.blogspot.com — Scarabey Ransomware (report)

External references