MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2025-01-19 02:56:16 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

cryptomix - add ransomnotes

Browse source
This commit is contained in:
Deborah Servili 2017-11-21 14:24:46 +01:00
parent bd940d45ad
commit a7d117781b
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
clusters/ransomware.json
View file

@ -5026,7 +5026,11 @@
"HELP_YOUR_FILES.html (CryptXXX)",
"HELP_YOUR_FILES.txt (CryptoWall 3.0, 4.0)",
"INSTRUCTION RESTORE FILE.TXT",
"# HELP_DECRYPT_YOUR_FILES #.TXT"
"# HELP_DECRYPT_YOUR_FILES #.TXT",
"_HELP_INSTRUCTION.TXT",
"C:\\ProgramData\\[random].exe",
"Hello!\n\nAttention! All Your data was encrypted!\n\nFor specific informartion, please send us an email with Your ID number:\n\nempty01@techmail.info\n\nempty02@yahooweb.co\n\nempty003@protonmail.com\n\nWe will help You as soon as possible!\n\nDECRYPT-ID-[id] number",
"Hello!\n\nAttention! All Your data was encrypted!\n\nFor specific informartion, please send us an email with Your ID number:\n\ny0000@tuta.io\n\ny0000@protonmail.com\n\ny0000z@yandex.com\n\ny0000s@yandex.com\n\nPlease send email to all email addresses! We will help You as soon as possible!\n\nDECRYPT-ID-[id]"
],
"refs": [
"http://www.nyxbone.com/malware/CryptoMix.html",