splunk-security_content/lookups/csv/ransomware_extensions_lookup.csv

1	Extensions	Name
2	*._ryp	Rakhni
3	*.0x0	Ungluk
4	*.1999	Ungluk
5	*.1nt3rlock	Interlock
6	*.1txt	Enigma
7	*.73i87A	Xorist
8	*.777	777
9	*.7h9r	7h9r
10	*.8lock8	8lock8
11	*.aaa	TeslaCrypt 0.x - 2.2.0
12	*.abc	TeslaCrypt 0.x - 2.2.0
13	*.adk	Angry Duck
14	*.adr	BaksoCrypt
15	*.AES256	Rakhni
16	*.AFD	Jigsaw
17	*.aga	CryFile
18	*.amba	AMBA
19	*.areyoulovemyrans	Samas-Samsam
20	*.AreYouLoveMyRansFile	Samas-Samsam
21	*.asier	Locky
22	*.avos	AvosLocker
23	*.avos2	AvosLocker
24	*.avoslinux	AvosLocker
25	*.bart	Bart
26	*.bart.zip	Bart
27	*.basta	BlackBasta
28	*.better_call_saul	Troldesh
29	*.bitstak	BitStak
30	*.bleepYourFiles	Apocalypse
31	*.bloc	Rector
32	*.blocatto	Blocatto
33	*.breeding123	Samas-Samsam
34	*.btc-help-you	Samas-Samsam
35	*.btc	Jigsaw
36	*.btcbtcbtc	Samas-Samsam
37	*.cactus	Cactus
38	*.canihelpyou	Samas-Samsam
39	*.cbf	Offline ransomware
40	*.CCCRRRPPP	Unlock92
41	*.cerber	Cerber
42	*.cerber2	Cerber
43	*.cerber3	Cerber
44	*.checkdiskenced	Samas-Samsam
45	*.chifrator@qq_com	Rakhni
46	*.cifgksaffsfyghd	Samas-Samsam
47	*.clf	BitCryptor / CoinVault / CryptoGraphic Locker
48	*.Cllp	Clop
49	*.Clop	Clop
50	*.code	CryptoMix
51	*.country82000	Samas-Samsam
52	*.coverton	Coverton
53	*.crashed	RemindMe
54	*.crime	iLock / iLockLight / Lortok
55	*.crinf	CryptInfinite
56	*.criptiko	CryFile
57	*.criptoko	CryFile
58	*.criptokod	CryFile
59	*.cripttt	CryFile
60	*.crjoker	CryptoJoker
61	*.crptrgr	CryptoRoger
62	*.CRRRT	Unlock92
63	*.cry	Central Security Treatment Organization / CryLocker / Hi Buddy! / Rakhni
64	*.cryp1	CryptXXX
65	*.crypt	CryptXXX / Gomasom / R980
66	*.crypt38	Crypt38
67	*.crypted	Nemucod
68	*.crypto	Rakhni / Zimbra
69	*.CryptoTorLocker2015!	CryptoTorLocker2015
70	*.cryptz	CryptXXX 3.0
71	*.crypz	CryptXXX 3.0
72	*.CrySiS	Virus-Encoder
73	*.ctbl	CTB-Locker
74	*.cts	Cactus
75	*.czvxce	Coverton
76	*.da_vinci_code	Troldesh
77	*.darkness	Rakhni
78	*.ded	DEDCryptor
79	*.disposed2017	Samas-Samsam
80	*.domino	Domino
81	*.dyatel@qq_com	Rakhni
82	*.ecc	TeslaCrypt 0.x - 2.2.0
83	*.encedRSA	Samas-Samsam
84	*.EnCiPhErEd	Xorist
85	*.encmywork	Samas-Samsam
86	*.encoderpass	Xorist
87	*.encrypt	Alpha Ransomware
88	*.encrypted	CryptoLocker / Apocalypse / CuteRansomware / Others
89	*.encryptedAES	Samas-Samsam
90	*.encryptedRSA	Samas-Samsam
91	*.encryptedyourfiles	Samas-Samsam
92	*.enigma	Coverton / Enigma
93	*.epic	Jigsaw
94	*.exotic	Exotic
95	*.exx	TeslaCrypt 0.x - 2.2.0
96	*.ezz	TeslaCrypt 0.x - 2.2.0
97	*.fantom	Fantom
98	*.filegofprencrp	Samas-Samsam
99	*.fileiscryptedhard	Xorist
100	*.filock	Popcorn Time
101	*.frtrss	CryptoFortress
102	*.fuck	MireWare
103	*.fucked	MireWare
104	*.fucku	Samas-Samsam
105	*.FuckYourData	Apocalypse
106	*.fun	Jigsaw
107	*.FUSION	Fusion
108	*.GANGBANG	Gangbang
109	*.globe	Globe v3
110	*.goforhelp	Samas-Samsam
111	*.gruzin@qq_com	Rakhni
112	*.gws	Jigsaw
113	*.H3LL	Ungluk
114	*.ha3	El-Polocker
115	*.happenencedfiles	Samas-Samsam
116	*.hb15	Rakhni
117	*.helpdecrypt@ukr.net	Rakhni
118	*.helpmeencedfiles	Samas-Samsam
119	*.herbst	Herbst
120	*.howcanihelpusir	Samas-Samsam
121	*.iaufkakfhsaraf	Samas-Samsam
122	*.iloveworld	Samas-Samsam
123	*.infected	Rector
124	*.interlock	Interlock
125	*.isis	EduCrypt
126	*.iwanthelpuuu	Samas-Samsam
127	*.iwishiyou	Samas-Samsam
128	*.JSWORM	JSWorm
129	*.justbtcwillhelpyou	Samas-Samsam
130	*.keybtc@inbox_com	KeyBTC
131	*.KEYH0LES	Mobef
132	*.KEYZ	Mobef
133	*.kimcilware	KimcilWare
134	*.kkk	Jigsaw
135	*.korrektor	Rector
136	*.kostya	Kostya
137	*.kraken	Rakhni
138	*.kratos	KratosCrypt
139	*.LeChiffre	LeChiffre
140	*.letmetrydecfiles	Samas-Samsam
141	*.lock93	Lock93
142	*.locked	ApocalypseVM / CryptoShocker / HiddenTear / Others
143	*.locky	AutoLocky
144	*.locky	Hucky
145	*.locky	Locky
146	*.locky	PowerWare
147	*.LOL!	OMG! Ransomware
148	*.loveransisgood	Samas-Samsam
149	*.magic	Magic
150	*.MEDUSA	Medusa
151	*.mention9823	Samas-Samsam
152	*.micro	TeslaCrypt 3.0+
153	*.MILIHPEN	Milihpen
154	*.moments2900	Samas-Samsam
155	*.mp3	TeslaCrypt 3.0+
156	*.myransext2017	Samas-Samsam
157	*.nalog@qq_com	Rakhni
158	*.NEFILIM	Nefilim
159	*.NEMTY_*	Nemty
160	*.nochance	Rakhni
161	*.noproblemwedecfiles	Samas-Samsam
162	*.notfoundrans	Samas-Samsam
163	*.odcodc	ODCODC
164	*.odin	Locky
165	*.OFFWHITE	Offwhite
166	*.OMG!	OMG! Ransomware
167	*.only-we_can_help_you	Samas-Samsam
168	*.oor	LowLevel04
169	*.oplata@qq_com	Rakhni
170	*.oshit	Rakhni
171	*.osiris	Locky
172	*.otherinformation	Samas-Samsam
173	*.p5tkjw	Xorist
174	*.padcrypt	PadCrypt
175	*.paybtcs	Jigsaw
176	*.payms	Jigsaw
177	*.paymst	Jigsaw
178	*.payransom	Jigsaw
179	*.perl	Bart
180	*.pizda@qq_com	Rakhni
181	*.PoAr2w	Xorist
182	*.porno	Jigsaw
183	*.powerfulldecryp	Samas-Samsam
184	*.powerfulldecrypt	Samas-Samsam
185	*.prosperous666	Samas-Samsam
186	*.purge	Globe v1
187	*.R4A	7ev3n
188	*.R5A	7ev3n
189	*.RAD	Radamant
190	*.RADAMANT	Radamant
191	*.RDM	Radamant
192	*.reddot	RedDot
193	*.rekt	RektLocker
194	*.relock@qq_com	Rakhni
195	*.remind	RemindMe
196	*.rhysida	Rhysida
197	*.rip	Killer Locker
198	*.rokku	Rokku
199	*.RRK	Radamant
200	*.RSNSlocked	SNSLocker
201	*.RSplited	SNSLocker
202	*.RYK	Ryuk
203	*.sanction	Sanction
204	*.scl	CryptFIle2 / CryptoMix
205	*.SecureCrypted	Apocalypse
206	*.shino	ShinoLocker
207	*.shit	Locky
208	*.Silent	BlackShades Crypter
209	*.skjdthghh	Samas-Samsam
210	*.sport	Sport
211	*.stubbin	Samas-Samsam
212	*.supported2017	Samas-Samsam
213	*.suppose665	Samas-Samsam
214	*.suppose666	Samas-Samsam
215	*.surprise	Surprise
216	*.szf	SZFLocker
217	*.TELEGRAM	Telegram
218	*.termite	Termite
219	*.theworldisyours	Samas-Samsam
220	*.thor	Locky
221	*.toxcrypt	Toxcrypt
222	*.troyancoder@qq_com	Rakhni
223	*.trun	VaultCrypt
224	*.tzu	Surprise
225	*.unavailable	Apocalypse
226	*.vanhelsing	Vanhelsing
227	*.vanlocker	Vanhelsing
228	*.vault	VaultCrypt / Zlader
229	*.vekanhelpu	Samas-Samsam
230	*.Venusf	VenusLocker
231	*.Venusp	VenusLocker
232	*.VforVendetta	Samas-Samsam
233	*.vscrypt	Rector
234	*.vvv	TeslaCrypt 0.x - 2.2.0
235	*.wcry	WannaCry
236	*.weapologize	Samas-Samsam
237	*.weareyourfriends	Samas-Samsam
238	*.weencedufiles	Samas-Samsam
239	*.wflx	WildFire Locker
240	*.Where_my_files.txt	Apocalypse
241	*.Whereisyourfiles	Samas-Samsam
242	*.windows10	Troldesh
243	*.wncry	WannaCry
244	*.wncryt	WannaCry
245	*.wnry	WannaCry
246	*.wowreadfordecryp	Samas-Samsam
247	*.wowwhereismyfiles	Samas-Samsam
248	*.xcri	TeleCrypt
249	*.xort	VaultCrypt
250	*.xrtn	XRTN
251	*.xtbl	Troldesh / Virus-Encoder
252	*.xxx	TeslaCrypt 3.0+
253	*.xyz	Jigsaw
254	*.xyz	TeslaCrypt 0.x - 2.2.0
255	*.Z81928819	GhostCrypt
256	*.zc3791	Xorist
257	*.zcrypt	Zcrypt
258	*.zepto	Locky
259	*.zyklon	Zyklon
260	*.zzz	TeslaCrypt 0.x - 2.2.0
261	*.zzzzz	Locky