General

  • Target

    !!!READ ME!!!.txt

  • Size

    1KB

  • MD5

    19afa20e2dff87660b0c8aefc6a45d1e

  • SHA1

    86844b3052d14be6785f47b7f474760ecfd79adc

  • SHA256

    88484bd690378881beecf4e4970a2397556d9976056ef064b381a649f62ce54c

  • SHA512

    a8c15201122783ec8f4baa082920b39c253eb195b8236b4f2be401738f78bd9f78bca7089c755f9f9f63774fa6e9407752bb5d4ccefb93cb9ef35102e4e4050c

Score
10/10

Malware Config

Extracted

Ransom Note
Hello. This is DiskStation Security. What happened? - Your network was not secure. - Your Network-Attached Storage was compromised. What does this mean? Where are my files? - All your data has been encrypted and hidden on a special volume. - All your important documents have been downloaded. What can I do to recover my data? - If you want to recover your data, you have to send 0.12 Bitcoin to this wallet address: bc1qpw96t6d6s5w3hsdgv2t2a6mm5mpela6kzpx9mw Always double check the address when copying/pasting it!!!!! - You have until the 10th of March 2024 to send the payment. After this date your files will be almost impossible to recover. What should I do after I send the payment? - Your ID is: hwpnas1817 - Please email us your ID and payment confirmation to: [email protected] [email protected] - After we confirm your payment you will receive detailed instructions on how to decrypt all your data. It does not require any technical skills and it is done fast. Can I still use my nas? - Do not delete any files you find on your NAS. - Do not try to recover your data using any software as it will result in permanent data loss. - Do not modify any volumes or storage pools on your NAS. - Do not write large amounts of data to your disk. Why have my files been downloaded? - We reserve the right to leak or sell all your important documents, if no payment is made. Where can I buy and send bitcoin? - You can easily buy and send bitcoin from: https://www.moonpay.com/buy/btc https://paxful.com/buy-bitcoin https://localbitcoins.com/buy_bitcoins https://www.binance.com/en/buy-Bitcoin You can think of this as a failed security audit. We are professionals. This is a one time deal. We will restore your data immediately after the payment. We will even send you tips on how to strengthen your network security, to prevent any future attacks. Thank you.
URLs

https://www.moonpay.com/buy/btc

https://paxful.com/buy-bitcoin

https://www.binance.com/en/buy-Bitcoin

Signatures

Files

  • !!!READ ME!!!.txt