Similarly, Rancoz ransomware employs drive enumeration... to locate and target files for encryption
Ransomware group
Rancoz
Rancoz is a ransomware family referenced in reporting on observed attacker tradecraft.
Profile source: Mallory opens in a new tabRancoz
Family profile
Rancoz is a ransomware family referenced in reporting on observed attacker tradecraft. The provided content states that Rancoz employs drive enumeration to locate files for encryption, specifically enumerating drive types including remote drives (DRIVE_REMOTE) to identify encryption targets. It was observed in the third quarter of 2023 but not in the fourth quarter of 2023. No specific threat actor attribution, infection vector, targeted industries, platforms, ransom-note details, or indicators of compromise are provided in the source content.
Ransomware.live
Operational record
Reported operators
Threat actors
1 named in public reportingReporting
Research mentioning Rancoz
Jan 25
Dragos
Dragos Industrial Ransomware Analysis: Q4 2023 | Dragos
...observed in the third quarter but not in the fourth quarter of 2023... Rancoz
Jun 14
Picus Security
Picus Cyber Threat Intelligence Report May 2023: Top 10 MITRE ATT&CK Techniques
Similarly, Rancoz ransomware employs drive enumeration... to locate and target files for encryption
