AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← Catalog
REFERENCEPUBLIC INTELLIGENCE

Babuk Ranomsware

Ransomware galaxy based on https://docs.google.com/spreadsheets/d/1TWS238xacAto-fLKh1n5uTsdijWdCEsGIM0Y0Hvmc5g/pubhtml | Since this is the first detection of this malware in the wild, it’s not surprising that Babuk is not obsfuscated at all. Overall, it’s a pretty standard ransomware that utilizes some of the new techniques we see such as multi-threading encryption as well as abusing the Windows R

Reference details

Primary displayed family label
Babuk Ranomsware
Source context
2025/10/velociraptor-leveraged-in-ransomware-attacks.json
First reported
2025-10-14 17:31 UTC
Last reported
2025-10-14 17:31 UTC
Catalog updated
2026-10-08 06:18 UTC

Source family labels

Babuk Ranomsware

Tags

misp:galaxy-name="Ransomware"misp:galaxy-type="ransomware"misp-galaxy:ransomware="Babuk Ranomsware"

Published indicators

Network addresses are displayed in defanged form.

No file hashes or network indicators were published in this record.

Source observations

Cisco Talos published IOCs ↗

Evidence class
provider reported
Source family label
Babuk Ranomsware
Source confidence
Not reported
Observed
2025-10-14 17:31 UTC
Retrieved
2026-10-08 06:18 UTC

Research references