{"schema":"aeternae-malware-metadata/v1","generated_at":"2026-10-08T09:21:14+00:00","total_matching":1,"page":1,"page_size":200,"records":[{"id":"46c3496b3c07e1a6cc92ce8c8c299ccbbaefcb6b9230ef8db739eb6635c79490","kind":"reference","title":"Babuk Ranomsware","family":"Babuk Ranomsware","category":"Malware intelligence","summary":"Ransomware galaxy based on https://docs.google.com/spreadsheets/d/1TWS238xacAto-fLKh1n5uTsdijWdCEsGIM0Y0Hvmc5g/pubhtml | Since this is the first detection of this malware in the wild, it\u2019s not surprising that Babuk is not obsfuscated at all. Overall, it\u2019s a pretty standard ransomware that utilizes some of the new techniques we see such as multi-threading encryption as well as abusing the Windows R","first_seen":1760463081,"last_seen":1760463081,"created_at":1791440321,"updated_at":1791440321,"source_count":1,"data":{"context":"2025/10/velociraptor-leveraged-in-ransomware-attacks.json","tags":["misp:galaxy-name=\"Ransomware\"","misp:galaxy-type=\"ransomware\"","misp-galaxy:ransomware=\"Babuk Ranomsware\""],"aliases":[],"references":["https://github.com/Cisco-Talos/IOCs/blob/main/2025/10/velociraptor-leveraged-in-ransomware-attacks.json"],"filenames":[],"features":[],"related_cves":[],"labels":["Babuk Ranomsware"]},"observations":[{"source_id":"talos_ioc","source_url":"https://github.com/Cisco-Talos/IOCs/blob/main/2025/10/velociraptor-leveraged-in-ransomware-attacks.json","source_label":"Babuk Ranomsware","evidence_class":"provider_reported","confidence":null,"observed_at":1760463081,"fetched_at":1791440321,"data":{"context":"2025/10/velociraptor-leveraged-in-ransomware-attacks.json","tags":["misp:galaxy-name=\"Ransomware\"","misp:galaxy-type=\"ransomware\"","misp-galaxy:ransomware=\"Babuk Ranomsware\""],"aliases":[],"references":["https://github.com/Cisco-Talos/IOCs/blob/main/2025/10/velociraptor-leveraged-in-ransomware-attacks.json"],"family":"Babuk Ranomsware"}}],"indicators":[]}]}