HexaLocker V2 is a significant upgrade of the original HexaLocker ransomware, featuring enhanced encryption techniques and a stealer component called Skuld, which gathers sensitive information before file encryption. The new version persistently modifies registry keys, downloads the Skuld Stealer, and exfiltrates data using double extortion methods. Developed in Go, it uses various advanced encryption algorithms and replaces previous communication methods with a unique hash for victim communication. The updated ransomware poses an ongoing threat with its improved functionality and evasion techniques.
Table of contents
Key TakeawaysExecutive SummaryTechnical DetailsExfiltrationEncryptionConclusionOur RecommendationsMITRE ATT&CK® TechniquesIndicators of Compromise (IOCs)ReferencesSort: