RUHAPPY

Description

(FireEye) RUHAPPY is a destructive wiper tool seen on systems targeted by DOGCALL. It attempts to overwrite the MBR, causing the system not to boot. When victims’ systems attempt to boot, the string ‘Are you Happy?’ is displayed. The malware is believed to be tied to the developers of DOGCALL and HAPPYWORK based on similar PDB paths in all three.

Names

Name
RUHAPPY

Category

Malware

Type

  • Wiper

Information

Other Information

Uuid

a8c7c15b-7003-4dc4-ad11-c174f1a62894

Last Card Change

2020-04-23