Ransomware Research

Cyber SpLiTTer Ransomware

Cyber SpLiTTer is a malicious ransomware strain that encrypts victim files and demands ransom payment for decryption. First observed in the wild on September 1, 2016, this ransomware has been actively targeting systems worldwide. Security researchers also track this malware under the aliases: Cyber SpLiTTer NextGen, Cyber SpLiTTer Vbs.

Quick Facts

Ransomware Family
Cyber SpLiTTer
First Seen
September 1, 2016
Known Aliases
Cyber SpLiTTer NextGenCyber SpLiTTer Vbs

How Cyber SpLiTTer Ransomware Works

File Encryption Patterns

Cyber SpLiTTer modifies encrypted files using specific patterns to mark them as encrypted:

File extensions added after encryption:

..Isis..Crypted..кибер разветвитель..Cyber SpLiTTer Vbs

Ransom Note and Payment Demands

After encrypting files, Cyber SpLiTTer displays ransom notes demanding payment for file recovery:

fileREAD@My.txt
file@-Decrypt-@.txt

Ransom message:

notes/@-Decrypt-@.txt
fileReadMe.txt

Ransom message:

notes/ReadMe.txt
message

Ransom message:

notes/note.txt

Note locations:

OnceOnCompletion

Technical Indicators

Associated Executable Files

The following executable files are associated with Cyber SpLiTTer ransomware:

  • ransomware splitter vbs.exe
  • RANSOM~1.EXE
  • Cyber SpLiTTer Vbs.exe
  • CYBERS~1.EXE
  • Cyber SpLiTTer Vbs update.exe
  • Cyber SpLiTTer Vbsl.exe
  • Wextract
  • WEXTRACT.EXE .MUI
  • Cyber.EXE
  • Ransom.exe
  • Microsoft office.exe
  • Microsoft office.Exe
  • Runsome.exe
  • file.exe
  • cybersplitter.bin
  • SBLRANSOM[DON`T_RUN].EXE
  • sblransom[Don`t_Run].exe
  • CyberSplitterVBS Ransom1.exe
  • executable.exe
  • CyberSplitterVBS Ransom2.exe
  • lock.exe
  • STUB.exe
  • Avast .Isis.exe
  • Process_Hacker3.exe.EXE
  • free.apk
  • Process_Hacker3.exe

Elastio Can Help You

Don't let Cyber SpLiTTer ransomware take over your data

Elastio provides advanced ransomware protection and recovery solutions to keep your organization safe.

Learn MoreRequest a Demo

About This Analysis

This Cyber SpLiTTer ransomware analysis is part of Elastio's comprehensive ransomware detection database. Elastio provides advanced ransomware protection and recovery solutions, helping organizations defend against and recover from ransomware attacks like Cyber SpLiTTer.

Last updated: July 30, 2025

Recent Ransomware

Explore other threats in our database

View all ransomware