MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

cryptomix - add ransomnotes

pull/122/head
Deborah Servili 2017-11-21 14:24:46 +01:00
parent bd940d45ad
commit a7d117781b
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
clusters/ransomware.json
View File

@ -5026,7 +5026,11 @@
"HELP_YOUR_FILES.html (CryptXXX)", "HELP_YOUR_FILES.html (CryptXXX)",
"HELP_YOUR_FILES.txt (CryptoWall 3.0, 4.0)", "HELP_YOUR_FILES.txt (CryptoWall 3.0, 4.0)",
"INSTRUCTION RESTORE FILE.TXT", "INSTRUCTION RESTORE FILE.TXT",
"# HELP_DECRYPT_YOUR_FILES #.TXT" "# HELP_DECRYPT_YOUR_FILES #.TXT",
"_HELP_INSTRUCTION.TXT",
"C:\\ProgramData\\[random].exe",
"Hello!\n\nAttention! All Your data was encrypted!\n\nFor specific informartion, please send us an email with Your ID number:\n\nempty01@techmail.info\n\nempty02@yahooweb.co\n\nempty003@protonmail.com\n\nWe will help You as soon as possible!\n\nDECRYPT-ID-[id] number",
"Hello!\n\nAttention! All Your data was encrypted!\n\nFor specific informartion, please send us an email with Your ID number:\n\ny0000@tuta.io\n\ny0000@protonmail.com\n\ny0000z@yandex.com\n\ny0000s@yandex.com\n\nPlease send email to all email addresses! We will help You as soon as possible!\n\nDECRYPT-ID-[id]"
], ],
"refs": [ "refs": [
"http://www.nyxbone.com/malware/CryptoMix.html", "http://www.nyxbone.com/malware/CryptoMix.html",