APT / THREAT GROUP

Mr.Dec

aliases

Intelligence Profile

Mr. Dec ransomware is cryptovirus that was first spotted in mid-May 2018, and since then was updated multiple times. The ransomware encrypts all personal data on the device with the help of AES encryption algorithm and appends .[ID]random 16 characters[ID] file extension, preventing from their further usage.

Threat Analysis

Mr.Dec is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://www.2-spyware.com/remove-mr-dec-ransomware.html

→https://id-ransomware.blogspot.com/2018/05/mrdec-ransomware.html

Quick Facts

TypeAPT / Threat Group

Aliases3

Also Known As

Mr.DecMrDecSherminator

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Mr.Dec