General

  • Target

    ReadMe.hta

  • Size

    11KB

  • MD5

    21aab355417e963e8172ef72ba431cf6

  • SHA1

    a20011dea742b0486c55be655e14d9b838c9e23c

  • SHA256

    52c14a79e2de3f86586e94385621c6b53ed2fa25720619733205f48200acb4f7

  • SHA512

    e4b17f4faa2ffc25f938a510d84f72993b712f91bde2dbb13c0c8955c16e559fb794c02bd125e7a81f9c2e5f62c88a26ea061f0ef08525c24776388db8caa15e

  • SSDEEP

    192:M3mdxU1UPRHPEXyBYet2yXTWXnhLxmoLlfzfM8uaG3UN7tMs+OqdOgzzxJFVo:MdMRECCy+nZLlJdGEN7tMbNzxLVo

Score
10/10

Malware Config

Extracted

Ransom Note
YOUR FILES ARE ENCRYPTED Your PC security is at risk All your files were encrypted and important data was copied to our storage If you do not need your files, then the private key will be deleted within 5 days If you want to restore files and return important data, application, contact the operator and enter YOUR ID ID of your personal operator If the Operator did not respond within 24 hours or encountered any problem then send an email to our support In the header of the letter, indicate your ID and attach 2-3 infected files for the decryption tool Files should not have important information and should not exceed the size of more than 5 MB As our guarantees, we will return your files restored Attention! Do not rename encrypted files. Do not try to decrypt your data using third party software, it may cause permanent data loss. Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam. :::

Signatures

Files

  • ReadMe.hta
    .hta .js