Static task
static1
Behavioral task
behavioral1
Sample
RECOVERY INFORMATION !!!.txt
Resource
win7-20221111-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
RECOVERY INFORMATION !!!.txt
Resource
win10v2004-20221111-en
0 signatures
150 seconds
General
-
Target
RECOVERY INFORMATION !!!.txt
-
Size
2KB
-
MD5
ea123eac23bed0736e83ddb461c24155
-
SHA1
2e8df64bf7678e3f11ce689894582527b381ef15
-
SHA256
f20f2186335de1e089fc2167f36d7d8222901e8f8e4f527c1291bc5dc82e57fc
-
SHA512
08ef9429df0ea7ac1416de79f2af0cec2de65dfb1b07516a06eb04c153b52c69b4eb2a23424b14f75964a49a887c4158f9149a9caff5a7b67b252779855beba7
Score
10/10
Malware Config
Extracted
Ransom Note
little FAQ:
.1.
Q: Whats Happen?
A: Your files have been encrypted and now have the ".masscan" extension.
The file structure was not damaged, we did everything possible so that this could not happen.
.2.
Q: How to recover files?
A: If you wish to decrypt your files you will need to pay in bitcoins.
.3.
Q: What about guarantees?
A: Its just a business.
We absolutely do not care about you and your deals, except getting benefits.
If we do not do our work and liabilities - nobody will cooperate with us. Its not in our interests.
To check the ability to return files,
you can send us any 2 files with extension .masscan
(jpg, xls, doc, etc...not a database!) and small size (max 1 mb).
We will decrypt them and send them back to you. This is our guarantee.
.4.
Q: How will the decryption process proceed after payment?
A: After payment, we will send you our decoder program and detailed usage instructions.
With this program you will be able to decrypt all your encrypted files.
.5.
Q: If I don't want to pay bad people like you?
A: If you will not cooperate with our service - for us, its does not matter.
But you will lose your time and data, cause only we have the private key.
In practice - time is much more valuable than money.
.6.
Q: What happens if give up on decryption?
A: If you give up decryption,
there is no reward for our work and we will sell all your data on the dark web or in your country for compensation,
including financial data and user data.
.7.
Q: How to contact with you?
A: You can write us to our mailbox: [email protected]
If no response is received within 12 hours contact: [email protected](Backup email)
:::BEWARE:::
1.If you will try to use any third party software for restoring your data or antivirus solutions.
please make a backup for all encrypted files!
2.Any changes to encrypted files may result in private key corruption, resulting in the loss of all data!
3.If you delete any encrypted files from the current computer, you may not be able to decrypt them!
4.Your key is only kept for seven days beyond which it will never be decrypted!
In the letter include your personal ID! Send me this ID in your first email to me!
ID:07082022WZVH9dgW2b54b54b
Emails
Signatures
Files
-
RECOVERY INFORMATION !!!.txt