Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-02 11:39:05 UTC
Home > List all groups > List all tools > List all groups using tool HermeticRansom
 Tool: HermeticRansom
Names
HermeticRansom
PartyTicket
Elections GoRansom
SonicVote
Category Malware
Type Ransomware
Description
(Kaspersky) On February 24, 2022, Avast Threat Research published a tweet announcing the
discovery of new Golang ransomware, which they called HermeticRansom. This malware was
found around the same time the HermeticWiper was found, and based on publicly available
information from security community it was used in recent cyberattacks in Ukraine. The new
ransomware was likely used as a smokescreen for the HermeticWiper attack due to its non-sophisticated style and poor implementation.
Information
Malpedia Playbook
Last change to this tool card: 27 December 2022
Download this tool card in JSON format
All groups using tool HermeticRansom
Changed Name Country Observed
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=306fecbd-0510-4b7e-8f15-6aa4f5f69efd
Page 1 of 2

Unknown groups
  _[ Interesting malware not linked to an actor yet ]_  
1 group listed (0 APT, 0 other, 1 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=306fecbd-0510-4b7e-8f15-6aa4f5f69efd
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=306fecbd-0510-4b7e-8f15-6aa4f5f69efd
Page 2 of 2