splunk-security_content/lookups/ransomware_extensions.csv

1	Extensions	Name
2	.enc	.CryptoHasYou.
3	.777	777
4	.R4A	7ev3n
5	.R5A	7ev3n
6	.7h9r	7h9r
7	.8lock8	8lock8
8	.encrypt	Alpha Ransomware
9	.amba	AMBA
10	.adk	Angry Duck
11	.encrypted	Apocalypse
12	.SecureCrypted	Apocalypse
13	.FuckYourData	Apocalypse
14	.unavailable	Apocalypse
15	.bleepYourFiles	Apocalypse
16	.Where_my_files.txt	Apocalypse
17	.encrypted	ApocalypseVM
18	.locked	ApocalypseVM
19	.locky	AutoLocky
20	.adr	BaksoCrypt
21	.bart.zip	Bart
22	.bart	Bart
23	.perl	Bart
24	.clf	BitCryptor
25	.bitstak	BitStak
26	.Silent	BlackShades Crypter
27	.blocatto	Blocatto
28	.lock	Brazilian
29	.cry	Central Security Treatment Organization
30	.cerber	Cerber
31	.cerber2	Cerber
32	.cerber3	Cerber
33	.clf	CoinVault
34	.coverton	Coverton
35	.enigma	Coverton
36	.czvxce	Coverton
37	.criptiko	CryFile
38	.criptoko	CryFile
39	.criptokod	CryFile
40	.cripttt	CryFile
41	.aga	CryFile
42	.cry	CryLocker
43	.ENCRYPTED	Crypren
44	.crypt38	Crypt38
45	.scl	CryptFIle2
46	.crinf	CryptInfinite
47	.frtrss	CryptoFortress
48	.clf	CryptoGraphic Locker
49	.crjoker	CryptoJoker
50	.encrypted	CryptoLocker
51	.ENC	CryptoLocker
52	.code	CryptoMix
53	.scl	CryptoMix
54	.crptrgr	CryptoRoger
55	.locked	CryptoShocker
56	.CryptoTorLocker2015!	CryptoTorLocker2015
57	.crypt	CryptXXX
58	.crypt	CryptXXX 2.0
59	.crypt	CryptXXX 3.0
60	.cryp1	CryptXXX 3.0
61	.crypz	CryptXXX 3.0
62	.cryptz	CryptXXX 3.0
63	.cryp1	CryptXXX 3.1
64	.ctbl	CTB-Locker
65	.encrypted	CuteRansomware
66	.ded	DEDCryptor
67	.domino	Domino
68	.locked	EDA2 / HiddenTear
69	.isis	EduCrypt
70	.locked	EduCrypt
71	.ha3	El-Polocker
72	.enigma	Enigma
73	.1txt	Enigma
74	.exotic	Exotic
75	.locked	Fakben
76	.fantom	Fantom
77	.Z81928819	GhostCrypt
78	.purge	Globe v1
79	.globe	Globe v3
80	.locked	GNL Locker
81	.crypt	Gomasom
82	.herbst	Herbst
83	.cry	Hi Buddy!
84	.locky	Hucky
85	.crime	iLock
86	.crime	iLockLight
87	.btc	Jigsaw
88	.kkk	Jigsaw
89	.fun	Jigsaw
90	.gws	Jigsaw
91	.porno	Jigsaw
92	.payransom	Jigsaw
93	.payms	Jigsaw
94	.paymst	Jigsaw
95	.AFD	Jigsaw
96	.paybtcs	Jigsaw
97	.epic	Jigsaw
98	.xyz	Jigsaw
99	.locked	Job Crypter
100	.encrypted	KeRanger
101	.keybtc@inbox_com	KeyBTC
102	.rip	Killer Locker
103	.kimcilware	KimcilWare
104	.locked	KimcilWare
105	.kostya	Kostya
106	.kratos	KratosCrypt
107	.LeChiffre	LeChiffre
108	.locky	Locky
109	.zepto	Locky
110	.odin	Locky
111	.shit	Locky
112	.thor	Locky
113	.asier	Locky
114	.zzzzz	Locky
115	.osiris	Locky
116	.lock93	Lock93
117	.crime	Lortok
118	.oor	LowLevel04
119	.magic	Magic
120	.Lock	MIRCOP
121	.fucked	MireWare
122	.fuck	MireWare
123	.locked	MM Locker
124	.KEYZ	Mobef
125	.KEYH0LES	Mobef
126	.crypted	Nemucod
127	.odcodc	ODCODC
128	.cbf	Offline ransomware
129	.LOL!	OMG! Ransomware
130	.OMG!	OMG! Ransomware
131	.padcrypt	PadCrypt
132	.locked	Philadelphia
133	.locked	PokemonGO
134	.filock	Popcorn Time
135	.locky	PowerWare
136	.crypt	R980
137	.locked	RAA encryptor
138	.RDM	Radamant
139	.RRK	Radamant
140	.RAD	Radamant
141	.RADAMANT	Radamant
142	.locked	Rakhni
143	.kraken	Rakhni
144	.darkness	Rakhni
145	.nochance	Rakhni
146	.oshit	Rakhni
147	.oplata@qq_com	Rakhni
148	.relock@qq_com	Rakhni
149	.crypto	Rakhni
150	.helpdecrypt@ukr.net	Rakhni
151	.pizda@qq_com	Rakhni
152	.dyatel@qq_com	Rakhni
153	._ryp	Rakhni
154	.nalog@qq_com	Rakhni
155	.chifrator@qq_com	Rakhni
156	.gruzin@qq_com	Rakhni
157	.troyancoder@qq_com	Rakhni
158	.encrypted	Rakhni
159	.cry	Rakhni
160	.AES256	Rakhni
161	.enc	Rakhni
162	.hb15	Rakhni
163	.vscrypt	Rector
164	.infected	Rector
165	.bloc	Rector
166	.korrektor	Rector
167	.rekt	RektLocker
168	.remind	RemindMe
169	.crashed	RemindMe
170	.rokku	Rokku
171	.encryptedAES	Samas-Samsam
172	.encryptedRSA	Samas-Samsam
173	.encedRSA	Samas-Samsam
174	.justbtcwillhelpyou	Samas-Samsam
175	.btcbtcbtc	Samas-Samsam
176	.btc-help-you	Samas-Samsam
177	.only-we_can-help_you	Samas-Samsam
178	.iwanthelpuuu	Samas-Samsam
179	.notfoundrans	Samas-Samsam
180	.encmywork	Samas-Samsam
181	.weapologize	Samas-Samsam
182	.stubbin	Samas-Samsam
183	.areyoulovemyrans	Samas-Samsam
184	.loveransisgood	Samas-Samsam
185	.myransext2017	Samas-Samsam
186	.disposed2017	Samas-Samsam
187	.prosperous666	Samas-Samsam
188	.supported2017	Samas-Samsam
189	.country82000	Samas-Samsam
190	.moments2900	Samas-Samsam
191	.breeding123	Samas-Samsam
192	.mention9823	Samas-Samsam
193	.suppose666	Samas-Samsam
194	.skjdthghh	Samas-Samsam
195	.cifgksaffsfyghd	Samas-Samsam
196	.iaufkakfhsaraf	Samas-Samsam
197	.filegofprencrp	Samas-Samsam
198	.weencedufiles	Samas-Samsam
199	.encryptedyourfiles	Samas-Samsam
200	.letmetrydecfiles	Samas-Samsam
201	.otherinformation	Samas-Samsam
202	.weareyourfriends	Samas-Samsam
203	.noproblemwedecfiles	Samas-Samsam
204	.powerfulldecrypt	Samas-Samsam
205	.wowreadfordecryp	Samas-Samsam
206	.wowwhereismyfiles	Samas-Samsam
207	.helpmeencedfiles	Samas-Samsam
208	.theworldisyours	Samas-Samsam
209	.vekanhelpu	Samas-Samsam
210	.howcanihelpusir	Samas-Samsam
211	.VforVendetta	Samas-Samsam
212	.checkdiskenced	Samas-Samsam
213	.goforhelp	Samas-Samsam
214	.iloveworld	Samas-Samsam
215	.canihelpyou	Samas-Samsam
216	.AreYouLoveMyRansFile	Samas-Samsam
217	.fucku	Samas-Samsam
218	.happenencedfiles	Samas-Samsam
219	.iwishiyou	Samas-Samsam
220	.powerfulldecryp	Samas-Samsam
221	.suppose665	Samas-Samsam
222	.Whereisyourfiles	Samas-Samsam
223	.sanction	Sanction
224	.locked	Shark
225	.shino	ShinoLocker
226	.locked	SkidLocker / Pompous
227	.encrypted	Smrss32
228	.RSNSlocked	SNSLocker
229	.RSplited	SNSLocker
230	.sport	Sport
231	.locked	Stampado
232	.locked	Strictor
233	.surprise	Surprise
234	.tzu	Surprise
235	.szf	SZFLocker
236	.xcri	TeleCrypt
237	.vvv	TeslaCrypt 0.x - 2.2.0
238	.ecc	TeslaCrypt 0.x - 2.2.0
239	.exx	TeslaCrypt 0.x - 2.2.0
240	.ezz	TeslaCrypt 0.x - 2.2.0
241	.abc	TeslaCrypt 0.x - 2.2.0
242	.aaa	TeslaCrypt 0.x - 2.2.0
243	.zzz	TeslaCrypt 0.x - 2.2.0
244	.xyz	TeslaCrypt 0.x - 2.2.0
245	.micro	TeslaCrypt 3.0+
246	.xxx	TeslaCrypt 3.0+
247	.ttt	TeslaCrypt 3.0+
248	.mp3	TeslaCrypt 3.0+
249	.Encrypted	TorrentLocker
250	.enc	TorrentLocker
251	.toxcrypt	Toxcrypt
252	.better_call_saul	Troldesh
253	.xtbl	Troldesh
254	.da_vinci_code	Troldesh
255	.windows10	Troldesh
256	.enc	TrueCrypter
257	.locked	Turkish Ransom
258	.H3LL	Ungluk
259	.0x0	Ungluk
260	.1999	Ungluk
261	.CRRRT	Unlock92
262	.CCCRRRPPP	Unlock92
263	.vault	VaultCrypt
264	.xort	VaultCrypt
265	.trun	VaultCrypt
266	.Venusf	VenusLocker
267	.Venusp	VenusLocker
268	.CrySiS	Virus-Encoder
269	.xtbl	Virus-Encoder
270	.wflx	WildFire Locker
271	.EnCiPhErEd	Xorist
272	.73i87A	Xorist
273	.p5tkjw	Xorist
274	.PoAr2w	Xorist
275	.fileiscryptedhard	Xorist
276	.encoderpass	Xorist
277	.zc3791	Xorist
278	.xrtn	XRTN
279	.zcrypt	Zcrypt
280	.crypto	Zimbra
281	.vault	Zlader / Russian
282	.zyklon	Zyklon
283	.wncry	WannaCry
284	.wcry	WannaCry
285	.wnry	WannaCry
286	.wncryt	WannaCry
287	.WNCRYT	WannaCry
288	.RYK	Ryuk
289	.Clop	Clop
290	.Cllp	Clop