9648708635355a93e555ab597313767a
- SHA256 eedf4777657feccaaa0f41376507e29afae7eb2109161d13f35fc94bbacd6291
General
- Target 9648708635355a93e555ab597313767a
- Size 5KB
- Sample240212-fen7wsbc4y
- SHA256 eedf4777657feccaaa0f41376507e29afae7eb2109161d13f35fc94bbacd6291
Score
10/10
Malware Config
Extracted
-
medusalocker
Ransom Note
- Your personal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ll your important files have been encrypted! Your files are safe! Only modified. (RSA+AES) ANY ATTEMPT TO RESTORE YOUR FILES WITH THIRD-PARTY SOFTWARE WILL PERMANENTLY CORRUPT IT. DO NOT MODIFY ENCRYPTED FILES. DO NOT RENAME ENCRYPTED FILES. No software available on internet can help you. We are the only ones able to solve your problem. We gathered highly confidential/personal data. These data are currently stored on a private server. This server will be immediately destroyed after your payment. If you decide to not pay, we will release your data to public or re-seller. So you can expect your data to be publicly available in the near future.. We only seek money and our goal is not to damage your reputation or prevent your business from running. You will can send us 2-3 non-important files and we will decrypt it for free to prove we are able to give your files back. Contact us for price and get decryption software. qd7pcafncosqfqu3ha6fcx4h6sr7tzwagzpcdcnytiw3b6varaeqv5yd.onion * Note that this server is available via Tor browser only Follow the instructions to open the link: 1. Type the addres "https://www.torproject.org" in your Internet browser. It opens the Tor site. 2. Press "Download Tor", then press "Download Tor Browser Bundle", install and run it. 3. Now you have Tor browser. In the Tor Browser open qd7pcafncosqfqu3ha6fcx4h6sr7tzwagzpcdcnytiw3b6varaeqv5yd.onion 4. Start a chat and follow the further instructions. If you can not use the above link, use the email: [email protected] [email protected] * To contact us, create a new free email account on the site: protonmail.com IF YOU DON'T CONTACT US WITHIN 72 HOURS, PRICE WILL BE HIGHER.
Signatures
- Medusalocker family
File Explorer
-
9648708635355a93e555ab597313767a