seon

General

Target

591e7f5eb141c22919a406508f63a558e3bd732fe38844cedbbea938d666e78b
Size

62KB
Sample

220625-g7nmhahdar
MD5

eb5d62f37c2a7cdd355b483d06ff7278
SHA1

e21b853bd54e1305f3c0d0eb6f8da52b70b0d722
SHA256

591e7f5eb141c22919a406508f63a558e3bd732fe38844cedbbea938d666e78b
SHA512

80c377cfe3f707bb118740b98f2a04f8e3700394ff7519e09f04a861a2ed91e516337d729526c4203f41c87ffd2de9f6542a9f0986d73f7fec4e32740adfc4b3

Score

10^/10

Malware Config

Extracted

Path

C:\MSOCache\YOUR_FILES_ARE_ENCRYPTED.TXT

Ransom Note

SEON RANSOMWARE ver 0.2 all your files has been encrypted There is only way to get your files back: contact with us We accept Bitcoin and other cryptocurrencies Do not try to reinstall operation system on your computer Do not try to decrypt files with third party tools, this can lead to data loss You can decrypt 1 file for free Our contact emails: [email protected] [email protected]

Emails

[email protected]

Extracted

Path

C:\Users\Admin\AppData\Local\Temp\readme.hta

Ransom Note

All your documents, photos, databases and other important files have been encrypted and you can't decrypt it yourself. No one but us can return your files. Free decryption utility does not exist. Each file is encrypted with its unique key, cryptography based on elliptic curves, key recovery is impossible. Focus on the problem, follow your instructions and everything will be fine. DON'T PANIC! YOU CAN RETURN ALL YOUR FILES! FREE decrypting as guarantee You can test decryption 1 any file for free (with help our special software " SEON Decryptor "). What to do? First you should write me and i'll send you a special software " SEON Decryptor " (this software needed to decrypt encrypted files). To start the process of decrypting ALL files, you need buy key to the " SEON Decryptor ". Contacts E-Mail: [email protected] E-Mail: [email protected] Attention! Decryption keys are individual, the keys of other users will not work for you Do not try to decrypt files with third party tools, this can lead to data loss Do not try to reinstall operation system on your computer

Emails

[email protected]

Targets

- Target
  
  591e7f5eb141c22919a406508f63a558e3bd732fe38844cedbbea938d666e78b
- Size
  
  62KB
- MD5
  
  eb5d62f37c2a7cdd355b483d06ff7278
- SHA1
  
  e21b853bd54e1305f3c0d0eb6f8da52b70b0d722
- SHA256
  
  591e7f5eb141c22919a406508f63a558e3bd732fe38844cedbbea938d666e78b
- SHA512
  
  80c377cfe3f707bb118740b98f2a04f8e3700394ff7519e09f04a861a2ed91e516337d729526c4203f41c87ffd2de9f6542a9f0986d73f7fec4e32740adfc4b3
Score

10^/10

seon ransomware trojan
- Seon
  The Seon Ransomware is an encryption ransomware Trojan first observed on November 14, 2018.
  trojan ransomware seon
- Modifies extensions of user files
  Ransomware generally changes the extension on encrypted files.
  ransomware
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2