Snake (Malware Family)
By Fraunhofer FKIE
Archived: 2026-04-05 12:48:14 UTC
Snake Ransomware is a Golang ransomware reportedly containing obfuscation not typically seen in Golang
ransomware. This malware will remove shadow copies and kill processes related to SCADA/ICS devices, virtual
machines, remote management tools, network management software, and others. After this, encryption of files on
the device commences, while skipping Windows system folders and various system files. A random 5 character
string is appended to encrypted files. According to Bleeping Computer, this ransomware takes an especially long
time to encrypt files on a targeted machine. This ransomware is reported to target an entire network, rather than
individual workstations.
[TLP:WHITE] win_snake_auto (20201014 | autogenerated rule brought to you by yara-signator)
Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.snake
https://malpedia.caad.fkie.fraunhofer.de/details/win.snake
Page 1 of 1