The cyber threat team at retail giant Walmart has analyzed a new ransomware family dubbed Sugar, which is offered through a ransomware-as-a-service (RaaS) model.
Unlike other ransomware operations, Sugar ransomware appears to primarily focus on individual computers instead of entire enterprises. The Sugar malware was first discovered in the wild in November 2021, it is a Delphi malware that borrows code from other ransomware families.
One of the most interesting components of the new malware family is the crypter that uses a modified version of RC4 algorithm and the reuse of the same routine from the crypter as part of the string decoding in the malware.
