Static task
static1
Behavioral task
behavioral1
Sample
!0XXX_DECRYPTION_README.txt
Resource
win10-20240404-en
0 signatures
150 seconds
General
-
Target
!0XXX_DECRYPTION_README.TXT
-
Size
1KB
-
MD5
d5206b13faea686112c123e74870b7f6
-
SHA1
21f9ff9e3abfffaa8d15365980110ac6a0bbeb2f
-
SHA256
8921e21c6ca40125a0c29f1a1ebab489fe7b5562f0456bdf6ef811dc2eadca35
-
SHA512
8ae7871aa1be141b3b8c9725275735c33c99fb17ddda86ace50c6c567edf0d544fd175218a46c1ebd40bce91ec810731a26a7104c88a160920a385fd78969588
Score
10/10
Malware Config
Extracted
Ransom Note
All your files have been encrypted with 0XXX Virus.
Your unique id: 2F07C78282B049FB9A0FA85103C44B8D
You can buy decryption for 1200$USD in Bitcoins.
To do this:
1) Send your unique id 2F07C78282B049FB9A0FA85103C44B8D and max 3 files for test decryption to [email protected]
2) After decryption, we will send you the decrypted files and a unique bitcoin wallet for payment.
3) After payment ransom for Bitcoin, we will send you a decryption program and instructions. If we can decrypt your files, we have no reason to deceive you after payment.
Also after payment we will give you some tips to protect yourself from this in the future.
FAQ:
Can I get a discount?
No. The ransom amount is calculated based on the number of encrypted office files and discounts are not provided. All such messages will be automatically ignored.
What is Bitcoin?
read bitcoin.org
Where to buy bitcoins?
https://bitcoin.org/en/buy
https://buy.moonpay.io
or use google.com
Where is the guarantee that I will receive my files back?
The very fact that we can decrypt your random files is a guarantee. It makes no sense for us to deceive you. Moreover, it would hurt our business.
How quickly will I receive the key and decryption program after payment?
As a rule, within a few minutes or hours, but very rarely there may be a delay of 1-2 days.
How does the decryption program work?
It's simple. You need to copy the key and select a folder to decrypt. The program will automatically decrypt all encrypted files in this folder and its subfolders.
Emails
Signatures
Files
-
!0XXX_DECRYPTION_README.TXT