<<< Hide Navigation Hide TOC >>>
FIVEHANDS (84187393-2fe9-4136-8720-a6893734ee8c)
FIVEHANDS is a customized version of DEATHRANSOM ransomware written in C++. FIVEHANDS has been used since at least 2021, including in Ransomware-as-a-Service (RaaS) campaigns, sometimes along with SombRAT.[FireEye FiveHands April 2021][NCC Group Fivehands June 2021]
Cluster A![]() |
Galaxy A![]() |
Cluster B![]() |
Galaxy B![]() |
Level![]() |
---|---|---|---|---|
Vice Society (2e2d3e75-1160-4ba5-80cc-8e7685fcfc44) | Tidal Groups | FIVEHANDS (84187393-2fe9-4136-8720-a6893734ee8c) | Tidal Software | 1 |