Nokoyawa Ransomware is a new malware but has strong similarities with
Hive Ransomware. There attack chain, tools to penetrate and deploy and the order in which they execute various infection steps are similar. It is aimed at English-speaking and Chinese users, it can spread around the world. Distributed from a small country in Southeast Asia, the targets are companies from neighboring countries (China, Japan, South Korea, etc.). The extension is added to encrypted files:
.NOKOYAWA.
Nokoyawa Ransomware Signatures
Family: Ransom/W32.Nokoyawa.38912
MD5: 2e936942613b9ef1a90b5216ef830fbf
SHA256: e097cde0f76df948f039584045acfa6bd7ef863141560815d12c3c6e6452dce4
Nokoyawa Ransomware Download
