Ransomware Research

Scarab-Bin Ransomware

Scarab-Bin is a malicious ransomware strain that encrypts victim files and demands ransom payment for decryption. First observed in the wild on August 1, 2019, this ransomware has been actively targeting systems worldwide.

Quick Facts

Ransomware Family
Scarab-Bin
First Seen
August 1, 2019

How Scarab-Bin Ransomware Works

Targeted Files

NOSAMPLE b07eb50ad588cd246cc3f3bca18d903a6e95d8ffff8a0cf3f66fc1c5b24050fd -> Decoder Full extension ->111 .[crab2727@gmx.de].gdcb

File Encryption Patterns

Scarab-Bin modifies encrypted files using specific patterns to mark them as encrypted:

File extensions added after encryption:

..bin..lock..bin2..danger..crab..NEEDTOPAY..krab..crypt..crypt2019..zoro..Navi..Oops..exe..crypto

Ransom Note and Payment Demands

After encrypting files, Scarab-Bin displays ransom notes demanding payment for file recovery:

fileHOW TO RECOVER ENCRYPTED FILES.TXT

Ransom message:

notes/HOW TO RECOVER ENCRYPTED FILES.TXT
file!!! RETURN YOUR FILES !!!.TXT

Ransom message:

notes/!!! RETURN YOUR FILES !!!.TXT
fileRECOVER ENCRYPTED FILES.TXT

Ransom message:

notes/RECOVER ENCRYPTED FILES.TXT
fileRECOVER ALL FILES.TXT

Ransom message:

notes/RECOVER ALL FILES.TXT
file!!! RESTORE DATA !!!.TXT

Ransom message:

notes/!!! RESTORE DATA !!!.TXT
fileHOW TO RESTORE INFORMATION.TXT

Ransom message:

notes/HOW TO RESTORE INFORMATION.TXT
file!!! RESTORE YOUR FILES !!!.TXT

Ransom message:

notes/!!! RESTORE YOUR FILES !!!.TXT

Technical Indicators

Associated Executable Files

The following executable files are associated with Scarab-Bin ransomware:

  • decrypter.exe

Elastio Can Help You

Don't let Scarab-Bin ransomware take over your data

Elastio provides advanced ransomware protection and recovery solutions to keep your organization safe.

Learn MoreRequest a Demo

About This Analysis

This Scarab-Bin ransomware analysis is part of Elastio's comprehensive ransomware detection database. Elastio provides advanced ransomware protection and recovery solutions, helping organizations defend against and recover from ransomware attacks like Scarab-Bin.

Last updated: July 30, 2025

Recent Ransomware

Explore other threats in our database

View all ransomware