Skip to content
Ransomware group

Benzona Ransomware

Benzona is a financially motivated ransomware group that emerged in late 2024, targeting small to mid-sized organizations across manufacturing, healthcare, technology, and hospitality sectors using double-extortion tactics — encrypting files while exfiltrating data and threatening publication via a Tor-based leak site.

Profile source: Ransomware.live opens in a new tab

Benzona Ransomware

Family profile

Benzona is a financially motivated ransomware group that emerged in late 2024, targeting small to mid-sized organizations across manufacturing, healthcare, technology, and hospitality sectors using double-extortion tactics — encrypting files while exfiltrating data and threatening publication via a Tor-based leak site.

Ransomware.live

Operational record

View group record ↗

Ransomware.live

Published indicators

Full source record ↗

Pgp

9 total
  • -----BEGIN PUBLIC KEY-----
  • MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NEeX5fReBT10DekLoyw
  • sFTI/F4ql+6fTKOgwbe+KrGro4qXg6CSzI4w2Gz7wGwjDuZgcnySDHeb9HIlZUr+
  • +2HJKVXE2+/Hqgr3BPInSZpcxkK5V88NB4jSG/c+/oNqoHRhLd+EoUWyq5kuCBFn
  • ou9nutDHiaxTYDp9Sb/p0lLEoe5WIqLBiokUw2xCm+ALpXJrexQjT1cLhi2CH5YQ
  • QQRKRAyKfNT7RzoRzlNX5gXnXFovlewBw8oNHkTY20kOmc2wC/InZYEBZmx5kdBp
  • k5BEg2wOe9Wl5zi/EmNqtNSJFlz4Zvse8pWS0QbWa5PRaqAEmqb1zTG2SPicR2Br
  • awIDAQAB
  • -----END PUBLIC KEY-----

Md5

1 total
  • 6e2189ab11f130ead644b1d5bd00f1ac

Sha256

1 total
  • 09f7432834ce15e701aa7fcc84a9c2441c1c7e0a9cb66a6211845be73d2597cc

Tox

1 total
  • 7308E8CFE8AA18D718B5EF44C34A2E5E2C90B7FDB150FA2EC31E995F5F4B23044A98802A4DF0

Ip

1 total
  • 179.43.139.126

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.