Behavioral task
behavioral1
Sample
README.txt
Resource
win7-20230621-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
README.txt
Resource
win10v2004-20230621-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
README.TXT
-
Size
1KB
-
MD5
e1be3906675a5a4f221589d37c0c51a6
-
SHA1
ef93321350fa6d6e96fe70d3386b19aa83591c1f
-
SHA256
a2537a57e66931b1fa8879dbd5b2c47946f082d42cf1fb744384c0f4c65c7178
-
SHA512
f18d8811532d488423d0c3c77aaebfc632ef16c8daf3ea26f8efd33fc6d0693c4c4ec5accfa6ba45e5fc1908cf95b3829c5e874f23512e2c40284161651337a3
Score
10/10
Malware Config
Extracted
Family
royal
Ransom Note
Hello!
If you are reading this, it means that your system were hit by Royal ransomware.
Please contact us via :
http://royal2xthig3ou5hd7zsliqagy6yygk2cdelaxtni2fyad6dpmpxedid.onion/kIG1950eVA2AtebBeIXc5onaCVHV2HrY
In the meantime, let us explain this case.It may seem complicated, but it is not!
Most likely what happened was that you decided to save some money on your security infrastructure.
Alas, as a result your critical data was not only encrypted but also copied from your systems on a secure server.
From there it can be published online.Then anyone on the internet from darknet criminals, ACLU journalists, Chinese government(different names for the same thing),
and even your employees will be able to see your internal documentation: personal data, HR reviews, internal lawsuitsand complains, financial reports, accounting, intellectual property, and more!
Fortunately we got you covered!
Royal offers you a unique deal.For a modest royalty(got it; got it ? ) for our pentesting services we will not only provide you with an amazing risk mitigation service,
covering you from reputational, legal, financial, regulatory, and insurance risks, but will also provide you with a security review for your systems.
To put it simply, your files will be decrypted, your data restoredand kept confidential, and your systems will remain secure.
Try Royal today and enter the new era of data security!
We are looking to hearing from you soon!
URLs
http://royal2xthig3ou5hd7zsliqagy6yygk2cdelaxtni2fyad6dpmpxedid.onion/kIG1950eVA2AtebBeIXc5onaCVHV2HrY
Signatures
-
Royal family
Files
-
README.TXT