diff --git a/clusters/ransomware.json b/clusters/ransomware.json index c591c683..a5098b1d 100644 --- a/clusters/ransomware.json +++ b/clusters/ransomware.json @@ -13622,6 +13622,7 @@ }, { "description": "The cybercrime group that brought us Satan, DBGer and Lucky ransomware and perhaps Iron ransomware, has now come up with a new version or rebranding named 5ss5c. [...] It will however only encrypt files with the following extensions: 7z, bak, cer, csv, db, dbf, dmp, docx, eps, ldf, mdb, mdf, myd, myi, ora, pdf, pem, pfx, ppt, pptx, psd, rar, rtf, sql, tar, txt, vdi, vmdk, vmx, xls, xlsx, zip", + "meta": { "ransomnotes-filenames": [ "_如何解密我的文件_.txt" ],