djvu | 026bac9c5d071f17871de5b2f9a50f253e2253e1fcf88fc0fa64e4f032e72b74

General

Target

026bac9c5d071f17871de5b2f9a50f253e2253e1fcf88fc0fa64e4f032e72b74
Size

694KB
Sample

240306-fejmeabc51
MD5

18a7f7228835f08b029e9c04834be20a
SHA1

9e470172ddc989f4b17454dc079957e66ab2ce5b
SHA256

026bac9c5d071f17871de5b2f9a50f253e2253e1fcf88fc0fa64e4f032e72b74
SHA512

2f5eef5878b54311554f0309941807233ff11e09fb8241b7f455f8fe6394ed35b450ecddcffe036f2143580c9d5f4c26a12999ef7487509d7332b2a5d01a8e57
SSDEEP

12288:YlWVqm3RndQI5W+bUn+en9qtBqp/A3bYwX6BjW972Sma55yl6voMA:fvh6ypGriLtXmjW972xa+l6tA

Score

10^/10

Family

djvu

C2

http://habrafa.com/test1/get.php

Attributes

extension
.wisz
offline_id
4p0Nzrg1q0ND5of5Gtp2UBjthSXuE8VxnMrd4vt1
payload_url
http://brusuax.com/dl/build2.exe

http://habrafa.com/files/1/build3.exe
ransomnote
ATTENTION! Don't worry, you can return all your files! All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key. The only method of recovering files is to purchase decrypt tool and unique key for you. This software will decrypt all your encrypted files. What guarantees you have? You can send one of your encrypted file from your PC and we decrypt it for free. But we can decrypt only 1 file for free. File must not contain valuable information. Do not ask assistants from youtube and recovery data sites for help in recovering your data. They can use your free decryption quota and scam you. Our contact is emails in this text document only. You can get and look video overview decrypt tool: https://wetransfer.com/downloads/ace9dcf133a3c07499672522e2c6bd3a20240301114053/77eeff Price of private key and decrypt software is $999. Discount 50% available if you contact us first 72 hours, that's price for you is $499. Please note that you'll never restore your data without payment. Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours. To get this software you need write on our e-mail: [email protected] Reserve e-mail address to contact us: [email protected] Your personal ID: 0853ASdw

rsa_pubkey.plain