WinRAR (d9792748-b81a-4d82-a45e-de05c2a23dbf)

According to its website, WinRAR is a "data compression, encryption and archiving tool for Windows", which is designed to process RAR and ZIP files.^{[WinRAR Website]} It is known to be abused by threat actors in order to archive (compress) files prior to their exfiltration from victim environments.^{[U.S. CISA Play Ransomware December 2023]}

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Akira (923f478c-7ad1-516f-986d-61f96b9c553e)	Tidal Groups	WinRAR (d9792748-b81a-4d82-a45e-de05c2a23dbf)	Tidal Software	1
Akira Ransomware Actors (Deprecated) (0fcb2205-e75b-46c9-ac54-00f218d5e331)	Tidal Groups	WinRAR (d9792748-b81a-4d82-a45e-de05c2a23dbf)	Tidal Software	1
WinRAR (d9792748-b81a-4d82-a45e-de05c2a23dbf)	Tidal Software	Andariel (2cc997b5-5076-4eef-9974-f54387614f46)	Tidal Groups	1
Play (60f686d0-ae3d-5662-af32-119217dee2a7)	Tidal Groups	WinRAR (d9792748-b81a-4d82-a45e-de05c2a23dbf)	Tidal Software	1
WinRAR (d9792748-b81a-4d82-a45e-de05c2a23dbf)	Tidal Software	Play Ransomware Actors (Deprecated) (6eb50f82-86cc-4eff-b1d1-66e1c6fd74f3)	Tidal Groups	1
WinRAR (d9792748-b81a-4d82-a45e-de05c2a23dbf)	Tidal Software	Salt Typhoon (753c7cd1-ca9f-4632-bbd2-fd55b9e70b10)	Tidal Groups	1