A ransomware named SunCrypt has joined the ‘Maze cartel,’ and with their membership, we get insight into how these groups are working together. GrujaRS was finally able to find a sample of the SunCrypt ransomware so we can get a better glimpse into how the ransomware works. Maze has been hosting a data leak site and launching attacks from known public IP addresses. Maze may provide compromised network access to cartel members in exchange for a revenue share. The SunCrypt Ransomware sample is installed via a heavily obfuscated. script, shown below.
Source: https://www.bleepingcomputer.com/news/security/suncrypt-ransomware-sheds-light-on-the-maze-ransomware-cartel/