General
- Target 2024-06-07_ccf28af40d78acf12f05894559150e70_ryuk
- Size 11.9MB
- Sample240607-cq2qkshb44
- SHA256 cdf13eedd60a35d7ed8f74721e36c8f77505fc4da9ec6ae34c0f4e47f73c590d
Score
10/10
Malware Config
Extracted
Path
-
C:\Users\Admin\Pictures\README.txt
Ransom Note
- Your personal files are encrypted by Nagini-Locker. What happened to my computer? [!] Your documents, photos, databases and other important files have been encrypted with strongest encryption and unique key, generated for this computer. [!] Private decryption key is stored on a secret internet server and nobody can decrypt your files until you pay and obtain the private key. [!] You have only 72 hours to submit the payment. If you do not send the money within provided time, all your files will be permanently crypted and leaked on internet. How do i pay? [!] Send 0.01 BTC to this Bitcoin adress [!] 3DfRZMeEAEuD1pjMrE8P4VnPBB863oebHn How to buy bitcoin? [!] www.coinbase.com [!] www.bitcoin.org How can i recover my files? [!] After your payment, contact us at [email protected] to get your decryption key. Nagini.
Emails
Wallets
-
3DfRZMeEAEuD1pjMrE8P4VnPBB863oebHn
Targets
-
- Target 2024-06-07_ccf28af40d78acf12f05894559150e70_ryuk
- Size 11.9MB
- SHA256 cdf13eedd60a35d7ed8f74721e36c8f77505fc4da9ec6ae34c0f4e47f73c590d
Score10/10DemonWare
Ransomware first seen in mid-2020.
Loads dropped DLL