Behavioral task
behavioral1
Sample
HOW TO BACK FILES.txt
Resource
win7-20240220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
HOW TO BACK FILES.txt
Resource
win10v2004-20240704-en
0 signatures
150 seconds
General
-
Target
HOW TO BACK FILES.txt
-
Size
1KB
-
MD5
712690588810b1d262731f487d222f26
-
SHA1
7fa442dacf75173cb75ae1d57032df5aa3f7cba1
-
SHA256
185152bd1df7ef8b0ae6c044c5081a2552fb5f30995d903bcab1061cd0e79151
-
SHA512
7e8560376696dedf2c72e5a64092c11b97b2c746e4e75a9ee9008004bd8baf7c6d27bc3c73bfda238238ad519ac22337d00231ba26fc66a72c64ea1f9fb168e4
Score
10/10
Malware Config
Extracted
Family
targetcompany
Ransom Note
Hello
Your data has been stolen and encrypted
We will delete the stolen data and help with the recovery of encrypted files after payment has been made
Do not try to change or restore files yourself, this will break them
We provide free decryption for any 3 files up to 3MB in size on our website
How to contact with us:
1) Download and install TOR browser by this link: https://www.torproject.org/download/
2) If TOR blocked in your country and you can't access to the link then use any VPN software
3) Run TOR browser and open the site: wtyafjyhwqrgo4a45wdvvwhen3cx4euie73qvlhkhvlrexljoyuklaad.onion/mallox/privateSignin
4) Copy your private ID in the input field. Your Private key: 90B8BD6538EA43579707BA9E
5) You will see chat, payment information and we can make free test decryption here
Our blog of leaked companies:
wtyafjyhwqrgo4a45wdvvwhen3cx4euie73qvlhkhvlrexljoyuklaad.onion
If you are unable to contact us through the site, then you can email us: [email protected]
Waiting for a response via mail can be several days. Do not use it if you have not tried contacting through the site.�
Emails
URLs
http://wtyafjyhwqrgo4a45wdvvwhen3cx4euie73qvlhkhvlrexljoyuklaad.onion/mallox/privateSignin
http://wtyafjyhwqrgo4a45wdvvwhen3cx4euie73qvlhkhvlrexljoyuklaad.onion
Signatures
-
Targetcompany family
Files
-
HOW TO BACK FILES.txt