Static task
static1
General
-
Target
vv8r379fz-readme.txt
-
Size
6KB
-
MD5
3e3fe49e400ea5055173ddf37d35cf1f
-
SHA1
6b2b130c00838b428e80ac90470087c9743d6e79
-
SHA256
22fc411e926cacdd2db2cd8a9d84b8e5def2bc8cbdd3232f405171d44babc10d
-
SHA512
d78287fc96fc596876d0e41ac6bbd638d9f23be599ab44922026a048d13d8f2a5da1e4efd24ab83abfbdf9fdbabb71f5308a450170e085789353b2b9582ebce2
-
SSDEEP
96:oGiNsQ9xU3TPI2VQczcD7UZRI6IfFIJg/Rly5fEBR4fZ/r/nBZkdA75u:oG73jI2FhRI6qr/zy58cDna
Score
10/10
Malware Config
Extracted
Ransom Note
---=== Welcome. Again. ===---
[-] Whats HapPen? [-]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension vv8r379fz.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/85838EB704965160
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/85838EB704965160
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
iL6awO8+O03VXTNgWp7mVtAhvCnXDZh/CGoNBblYfDx8GiKlZYSJV+uceZOeiA2f
KMK2pThzOkm9Umee9xMRWFZfHfOitP0Y8/To3uavm7poLk1KvjO2/MxdzWvg9p27
1Ov+Au8Jmn3o/kjjqhgRQWk6hwskHt0G3MWhq6FLNRGMsNhDgzbFUDr2wg6pO5+Q
LW6/olG2wLcAU+HNUPIFMnfqLNdp5xy6hCuZL3CV/tjfPly1cc0g2RLBqrnjZGd9
P30gmMus2IRr8GzG6TOb1H2ZI/fZUq8RIcAVFDGxsM0zYynwB4QHtlzGhlktMtiU
AqEOaO+x6qUeoJjUC7qWmn1ZQ1IIAIipo85GdIKqNEU8bLyfVOTMrC8oMXHb+oV+
RNe89KxDHnU8EZNoLHHlm+jgcxjX99HSWtLgga1kKP3tKvl9zFP1rwh7Lk5JiCne
2Tau3iRziNAOh7JJFggH5ajl/30rrzfnzuydfnVgsLVOfBaH78wyRPFaFEDjUpTO
+zcUZ9l4o6QSipA1AgweCWWvM9AM3i/fbTY6W+b4rPWWrmliil8kGplF6FtszNJU
SKQj5xk0Eaa0PPBMhlvPBwtwaPjP1NWCdXB8gpYC5WA1nN8goK3xnT5Sb8Qm7m6u
5ys0PlIHuLxYunI8iUSHzV9Z1k5l31rqMTLuJUYuYBmCIA4VopohxI/mQRu0XYdT
LFFT7Wcxrw4jTrp0UsD0D0BDWWEoCaQc+q2v/gke4BhEAOO+91sG1+Tx5Cvs0Rin
Bw2wDCDnsNYV0UNGyd6b6cQINhljgHsm8MEXRht4iFz6D9tRjGbBYcMBy1ePTz6x
NAIGUX2cwUIZLbpcUr0Q/rknDH4u4xqr7b7KJuA+NkXuTETlvgMsycnMW60qVIf0
oAqLWr270NyFeYTOUE1StkLQ0A7i6oHzjHL4qFeDVURI3/Z/Fftk6IBep5pINg1s
GnIBzXDPDbxoL3C9OIZhS+kqR5UxjmitEO4TkN9ai40c40T3gtNTcuNptpfAotEK
yWPsRolrRzibj7hwM11n72Dodsn/oTwzLFj7BJHZmccKef1+fJb0yeskJxOZBIkO
fM0unX7fuu+f3ZstP7P6ZnW1ry9l7jcnXFuFXYTjfFdfnjyNodArLa9v+WSgMpSm
U4AHWKM4hz89URgsR0t9XnhvwwNaIKjTWwvA0r83fbrugp0aBohH70wuDe0kV/FR
AqO74NdFa7mSGQxJJFCJKdV0jpfIKtOa7fPfDy63pdUoCh1bKCYXB7yI7WzDsL53
jUGn+OASKG4N9UvtPuJIV0Ot7395FzmOMBg=
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DON'T try to change files by yourself, DON'T use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
URLs
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/85838EB704965160
http://decoder.re/85838EB704965160
Signatures
Files
-
vv8r379fz-readme.txt