Anubis Ransomware (637b89c8-e3f4-4eee-a86d-846518f1c5be)
A custom ransomware binary developed by the Anubis ransomware group, which uses double extortion tactics and operates as a ransomware-as-a-service (RaaS). The ransomware is reportedly capable of privilege escalation, self-propagation to facilitate wider encryption, and even has a file-wiping capability.[Kelacyber February 25 2025][Trend Micro - United States June 13 2025]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Anubis Ransomware (637b89c8-e3f4-4eee-a86d-846518f1c5be) | Tidal Software | Anubis Ransomware Group (8a280bdd-d14c-43ca-b5cb-bd68e1fda44a) | Tidal Groups | 1 |