Serpent ransomware-affected file
File type: Ransomware encrypted file
A .serpent file is a file affected by the Serpent ransomware. The ransomware adds the .serpent suffix to files it encrypts.
File type category:
Ransomware encrypted file
Date updated: October 16, 2026
The .serpent file extension is associated with Serpent ransomware, which was first reported in February 2017. These files contain the victim's original data in an encrypted form and cannot normally be used without decryption.
Serpent ransomware was distributed through spam emails targeting victims in Denmark. The messages used subjects such as "Sidste påmindelse for udestående faktura 1603750" and contained a link to an MS Word document that the recipient was instructed to download.
A .serpent file cannot be opened directly with a regular application because its contents are encrypted by Serpent ransomware. Renaming the file or changing its extension does not decrypt it.
No known decryptor is identified for these files. The original file can be opened normally only after it has been successfully decrypted.
A .serpent file cannot be meaningfully converted while it remains encrypted. It must first be successfully decrypted, after which the recovered original file can be converted using software that supports its original format.
Language