General

  • Target

    instruction.txt

  • Size

    8KB

  • MD5

    83ff6d0340b9724cc3ddf57557a82470

  • SHA1

    be32ea7ea5e74f8a3fea131d68a41f4bfef535d1

  • SHA256

    4b53a7ef8a0edbea581d4dfcb9fe0077af42eac9b1500ce0013bae4dee478b35

  • SHA512

    25bbe4efdd6bfa68cd14062d419f729a2882d3d0323f982ffad18cc817b06786a3d94cdbe70a8b942eee8804d1c550c6ed012f20774ae08f5528f08906984fd7

  • SSDEEP

    192:SbPhfiShweaDeltsPduBRWrewhXJ13xxU5UN2u3l:+Ph6CQeUPQBR6e2xjN2i

Score
10/10

Malware Config

Extracted

Family

gandcrab

Ransom Note
---= GANDCRAB V5.2 =--- ***********************UNDER NO CIRCUMSTANCES DO NOT DELETE THIS FILE, UNTIL ALL YOUR DATA IS RECOVERED*********************** *****FAILING TO DO SO, WILL RESULT IN YOUR SYSTEM CORRUPTION, IF THERE ARE DECRYPTION ERRORS***** Attention! All your files, documents, photos, databases and other important files are encrypted and have the extension: .BBZEDEKB The only method of recovering files is to purchase an unique private key. Only we can give you this key and only we can recover your files. The server with your key is in a closed network TOR. You can get there by the following ways: ---------------------------------------------------------------------------------------- | 0. Download Tor browser - https://www.torproject.org/ | 1. Install Tor browser | 2. Open Tor Browser | 3. Open link in TOR browser: http://gandcrabmfe6mnef.onion/f409e7aee8385cb9 | 4. Follow the instructions on this page ---------------------------------------------------------------------------------------- On our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. ATTENTION! IN ORDER TO PREVENT DATA DAMAGE: * DO NOT MODIFY ENCRYPTED FILES * DO NOT CHANGE DATA BELOW ---BEGIN GANDCRAB KEY--- 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 ---END GANDCRAB KEY--- ---BEGIN PC DATA--- 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 ---END PC DATA---
URLs

http://gandcrabmfe6mnef.onion/f409e7aee8385cb9

Signatures

Files

  • instruction.txt