Vovalex

Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 15:25:44

Context

Vovalex is a type of ransomware that encrypts files on victims' systems and demands a ransom payment for decryption keys. It is part of a broader category of malicious software designed to extract payment by holding data hostage.

Detection coverage

  • 2 YARA rules

Detection rules

  • DITEKSHEN_MALWARE_Win_Vovalex (yara-rule)
  • DITEKSHEN_INDICATOR_KB_ID_Ransomware_Vovalex (yara-rule)

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Win.Vovalex (report)
  • twitter.com — 1351808079164276736 (report)
  • twitter.com — 1355196321964109824 (report)

External references