ExtraDat Ransomware Ryuk

[Her]

Hi All

    I've Question, DAT 9453, cover the ransomware Ryuk ?? Variant of Ransomware HERMES, if don't cover, we need a Extradat for this please!. Thanks!

[AdithyanT]

Hi @Her

Thank you for your post. kindly please share the hash values or IOC values you may have so that we can get a confirmation fro you.

Each variant of a malware may or can include more than just one file at one level of attack and hence it is important that McAfee is provided with the Hash values or samples to determine whether we have coverage for you or not.

[Her]

Hi Adithyan!
For the moment i've one, i attach you. Thanks!
e75622957decf1594c2cbe726ff0aaba4a509dab7b77721d3db16977f224ae4a
cdn[.]onenote[.]net

[AdithyanT]

Hi @Her,

Thank you for your response. We have coverage for this one.

Detection Name: RDN/Generic.RP

Covered by DAT version 9453: YES

I sincerely hope this information is helpful.

[Thussain · Accepted solution]

In addition to what has been said @AdithyanT 

you may refer to the below links for better understanding of how Ryuk Ransomware works 

https://www.mcafee.com/enterprise/en-us/threat-center/threat-landscape-dashboard/ransomware-details....

https://securingtomorrow.mcafee.com/blogs/other-blogs/mcafee-labs/ryuk-ransomware-attack-rush-to-att...