App Review DoNotChange Ransomware - Demonstration of attack

[GrujaRS]

Encrypted files adds the extension .cry

Ransom note;HOW TO DECODE FILES!!!.txt;КАК РАСШИФРОВАТЬ ФАЙЛЫ!!!.txt

 

[Der.Reisende]

Thank you for another great demonstration @CyberSecurity GrujaRS!

Sample (high detection, turn off signatures for dynamic test purposes) can be found here:
https://malwaretips.com/threads/donotchange-ransomware.70183/

&it's been already cracked by Demonslay335 - good job
DoNotChange Ransomware (.id-7ES642406.cry, .Do_not_change_the_file_name.cryp) - Ransomware Help & Tech Support