App Review New (No name yet) Ransomware - Demonstration of attack video review.

[GrujaRS]

Encrypted files adds the extension .crypted


@GrujaRS CyberSecurity on Twitter

 

[Amelith Nargothrond]

Would it be possible to share the sample? Many thanks!

 

[Exterminator]

Would it be possible to share the sample? Many thanks!

Please ask for the sample in a PM.
Sample links cannot be posted with a live link even in the HUB and it would be better here to share it in a PM.
Thanks

 

[Captain Awesome]

Please ask for the sample in a PM.
Sample links cannot be posted with a live link even in the HUB and it would be better here to share it in a PM.
Thanks

But VirusTotal Link?

 

[Exterminator]

But VirusTotal Link?

No not a VirusTotal link but a live link to download the malware sample.

 

[DardiM]

Antivirus scan for 80d402f38ff9849ea5e9f8a126e00f423ca1b4f1121c8059aebed8336bfc6f30 at 2017-03-26 00:02:30 UTC - VirusTotal

https://www.hybrid-analysis.com/sam...4f1121c8059aebed8336bfc6f30?environmentId=100

 

[Der.Reisende]

Thank you for the demonstration @CyberSecurity GrujaRS and @DardiM for tracking down the samples!
A quick test with TEMASOFT Ranstop went well, although the software did not block the malware, but "only" recovered files automatically.
Q&A - TEMASOFT RANSTOP - User Experiences

 

[GrujaRS]

Encrypted files adds the extension .crypted

View attachment 144283 View attachment 144284 View attachment 144286 View attachment 144287
@GrujaRS CyberSecurity on Twitter

Finally real name Dxh26wam Ransomware!Thanks @Amigo_A_ Шифровальщики-вымогатели: Dxh26wam