VoidCrypt

First seen
2020-05-01 00:00:00
Malware type
ransomware
Family
Malware family
Last IoC activity
2026-07-18 21:56:57
Profile updated
2026-07-07 15:58:57

Context

VoidCrypt is a ransomware that encrypts files on a victim's system, demanding a ransom for decryption. It is known for appending a unique extension to encrypted files, often spreading through malicious email attachments or compromised software downloads.

Detection coverage

  • 2 YARA rules

Detection rules

  • DITEKSHEN_MALWARE_Win_Spyro (yara-rule)
  • SEKOIA_Ransomware_Win_Voidcrypt (yara-rule)