Parsing: enabled
Description
CryptNet is a newer Ransomware-as-a-Service (RaaS) operation first identified in April 2023. It follows a double-extortion model, performing data exfiltration before encrypting files. Written in .NET and obfuscated with .NET Reactor, CryptNet utilizes AES-256 (CBC) and RSA-2048 encryption. Its codebase shares strong similarities with Chaos and Yashma ransomware families.
External Analysis1
| External Analysis |
|---|
| https://www.zscaler.com/blogs/security-research/technical-analysis-cryptnet-ransomware |