General

  • Target

    !0XXX_DECRYPTION_README.TXT

  • Size

    1KB

  • MD5

    d5206b13faea686112c123e74870b7f6

  • SHA1

    21f9ff9e3abfffaa8d15365980110ac6a0bbeb2f

  • SHA256

    8921e21c6ca40125a0c29f1a1ebab489fe7b5562f0456bdf6ef811dc2eadca35

  • SHA512

    8ae7871aa1be141b3b8c9725275735c33c99fb17ddda86ace50c6c567edf0d544fd175218a46c1ebd40bce91ec810731a26a7104c88a160920a385fd78969588

Score
10/10

Malware Config

Extracted

Ransom Note
All your files have been encrypted with 0XXX Virus. Your unique id: 2F07C78282B049FB9A0FA85103C44B8D You can buy decryption for 1200$USD in Bitcoins. To do this: 1) Send your unique id 2F07C78282B049FB9A0FA85103C44B8D and max 3 files for test decryption to [email protected] 2) After decryption, we will send you the decrypted files and a unique bitcoin wallet for payment. 3) After payment ransom for Bitcoin, we will send you a decryption program and instructions. If we can decrypt your files, we have no reason to deceive you after payment. Also after payment we will give you some tips to protect yourself from this in the future. FAQ: Can I get a discount? No. The ransom amount is calculated based on the number of encrypted office files and discounts are not provided. All such messages will be automatically ignored. What is Bitcoin? read bitcoin.org Where to buy bitcoins? https://bitcoin.org/en/buy https://buy.moonpay.io or use google.com Where is the guarantee that I will receive my files back? The very fact that we can decrypt your random files is a guarantee. It makes no sense for us to deceive you. Moreover, it would hurt our business. How quickly will I receive the key and decryption program after payment? As a rule, within a few minutes or hours, but very rarely there may be a delay of 1-2 days. How does the decryption program work? It's simple. You need to copy the key and select a folder to decrypt. The program will automatically decrypt all encrypted files in this folder and its subfolders.

Signatures

Files

  • !0XXX_DECRYPTION_README.TXT