HermeticRansom or PartyTicket Ransomware is a Go based ransomware is actively attacking Ukrainian
targets with other Wipers. The ransomware iterates over all drive letters and recursively enumerates the files in each drive and its subfolders, excluding file paths that contain the strings Windows
and Program Files
. Ransom note it dropped in all folders is political in nature.
HermeticRansom PartyTicket Ransomware Signatures
HermeticRansom PartyTicket Ransomware Download