Ransomware Research

Chen_Error Ransomware

Chen_Error is a malicious ransomware strain that encrypts victim files and demands ransom payment for decryption. First observed in the wild on January 1, 2015, this ransomware has been actively targeting systems worldwide.

Quick facts

Ransomware Family
Chen_Error
First Seen
January 1, 2015

How Chen_Error ransomware works

File modification behavior

Chen_Error updates file modification timestamps after encryption.

File encryption patterns

Chen_Error modifies encrypted files using specific patterns to mark them as encrypted:

Prefixes added to encrypted files
  • error_

Ransom note and payment demands

After encrypting files, Chen_Error displays ransom notes demanding payment for file recovery:

fileREAD___ME.txt
notes/READ___ME.txt

Location: EveryFolder

fileREAD_ME.txt
notes/READ_ME.txt

Location: EveryFolder

Technical indicators

Associated executable files

The following executable files are associated with Chen_Error ransomware:

  • file-7968687_exe
  • temp.exe
  • dyYOxCbE.exe

About this analysis

This Chen_Error ransomware analysis is part of Elastio's comprehensive ransomware detection database. Elastio provides advanced ransomware protection and recovery, helping organizations defend against and recover from ransomware attacks like Chen_Error.

Last updated: April 11, 2024

Detection coverage

Elastio detects Chen_Error inside your data and backups.

The Hunt Engine uses Deep File Inspection to identify Chen_Error across live data, replicated data, and backups. If this family is in your environment, Elastio finds it before encryption completes. Run a hunt against your recovery points to confirm.