Entropy is a ransomware group distributed via Dridex, targeting random individuals and small businesses.
Entropy is a ransomware group active since early 2022, commonly distributed alongside Dridex banking trojan infections. It primarily targets random individuals and small businesses, with no indication of critical infrastructure targeting. The ransomware employs a custom packer previously seen in early Dridex samples, which complicates static analysis and detection. Defenders should monitor for Dridex-specific C2 traffic patterns and update signature bases to detect this specific packer variant.
Entropy is a ransomware first seen in 1st quarter of 2022, is being used in conjunction of Dridex infection. The ransomware uses a custom packer to pack itself which has been seen in some early dridex samples.
Entropy is commonly distributed alongside the Dridex banking trojan.
Defenders should monitor for Dridex-specific C2 traffic patterns and update signature bases to detect the custom packer.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.