f3d6de0e863fe521a9ade07b74b8ee73_JaffaCakes118
- SHA256 6155d97b557650957dfe6abc1ec30149a9537bac1a3d2eaae735a197bd8d6d3f
General
- Target f3d6de0e863fe521a9ade07b74b8ee73_JaffaCakes118
- Size 5KB
- Sample240416-tmwtlaed97
- SHA256 6155d97b557650957dfe6abc1ec30149a9537bac1a3d2eaae735a197bd8d6d3f
Score
10/10
Malware Config
Extracted
-
medusalocker
Ransom Note
- Your personal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ll your important files have been encrypted! Your files are safe! Only modified. (RSA+AES) ANY ATTEMPT TO RESTORE YOUR FILES WITH THIRD-PARTY SOFTWARE WILL PERMANENTLY CORRUPT IT. DO NOT MODIFY ENCRYPTED FILES. DO NOT RENAME ENCRYPTED FILES. No software available on internet can help you. We are the only ones able to solve your problem. We gathered highly confidential/personal data. These data are currently stored on a private server. This server will be immediately destroyed after your payment. If you decide to not pay, we will release your data to public or re-seller. So you can expect your data to be publicly available in the near future.. We only seek money and our goal is not to damage your reputation or prevent your business from running. You will can send us 2-3 non-important files and we will decrypt it for free to prove we are able to give your files back. Contact us for price and get decryption software. qd7pcafncosqfqu3ha6fcx4h6sr7tzwagzpcdcnytiw3b6varaeqv5yd.onion * Note that this server is available via Tor browser only Follow the instructions to open the link: 1. Type the addres "https://www.torproject.org" in your Internet browser. It opens the Tor site. 2. Press "Download Tor", then press "Download Tor Browser Bundle", install and run it. 3. Now you have Tor browser. In the Tor Browser open qd7pcafncosqfqu3ha6fcx4h6sr7tzwagzpcdcnytiw3b6varaeqv5yd.onion 4. Start a chat and follow the further instructions. If you can not use the above link, use the email: [email protected] [email protected] * To contact us, create a new free email account on the site: protonmail.com IF YOU DON'T CONTACT US WITHIN 72 HOURS, PRICE WILL BE HIGHER.
Signatures
- Medusalocker family
File Explorer
-
f3d6de0e863fe521a9ade07b74b8ee73_JaffaCakes118