[B]по Crysis появились новые варианты в марте-апреле 2019:[/B]
'.aqva' - '
[email protected]' - https://www.virustotal.com/#/file/57b7d93d19816aa8fd7987594ddd18e2f583285a02dfa74ce13381
fe926766e6/detection … cc @demonslay335 #CrySiS #Dharma #ransomware
+
'.AYE' - '
[email protected]' - https://www.virustotal.com/#/file/3145ce9af8f1e44e2c0f0a9123f8201a3aab013c7bfaf1f120fa4d
7e50a67259/detection … … cc @demonslay335 #CrySiS #Dharma #ransomware
'.korea' - '
[email protected]' - https://www.virustotal.com/#/file/068f9ed02827dd12d13bdb8aaa42837e1a10a69fa065e87353daef
8530584219/detection … cc @demonslay335 #CrySiS #Dharma #ransomware
'.plomb' - '
[email protected]' - https://www.virustotal.com/#/file/e4448bff0545df8f441f6b7a75a7e507483ee3b632f062ece72db8
abb37ff6b1/detection
'.NWA' - '
[email protected]' - https://www.virustotal.com/#/file/e18a0428781c243fa909d0a8296312192d462a15a67fe978d0e8c5
8b99ff43f5/detection … #CrySiS #Dharma #ransomware
'.com' 🤦♂️ - '
[email protected]' - https://www.virustotal.com/#/file/b8a87647159792fbf4e3b96609ecb8b465e493b8bc4491b760f82c
1c2b662c7c/detection … #CrySiS #Dharma #ransomware
'.azero' - '
[email protected]' - https://www.virustotal.com/#/file/07d0532783a3c1f7007f7f58f4002a64083719f81d77c855a30c24
41ebe97835/detection … #CrySiS #Dharma #ransomware
'.bk666' - '
[email protected]' - https://www.virustotal.com/#/file/9b4612a52d0f9e52689383fa264c68300fd550af5f41f0af1accce
f705d855c3/detection … #CrySiS #Dharma #ransomware
#Dharma #Ransomware spotted on ID Ransomware with extension ".stun", email "
[email protected]"
==================
'.ms13' - '
[email protected]' - https://www.virustotal.com/#/file/7459000c5cd1fd22aa03849f734131539ef5dd3f0b58dad4d01126
1a430ad70f/detection … #CrySiS #Dharma #ransomware
Jakub Kroustek:
'.carcn' - '
[email protected]' - https://www.virustotal.com/#/file/482722e411bf8148dc5b88b7ad234b02d000285efed9c7ad15e8f0
eb9bd08434/detection … #CrySiS #Dharma #ransomware
+
JakubKroustek
'.btix' - '
[email protected]' - https://www.virustotal.com/#/file/6a9fe57f144ce99ab8545a305ad8a94dc7f53fb7e8d0688c4d4f45
d9400b576b/detection … #CrySiS #Dharma #ransomware
+
demonslay335
#Dharma #Ransomware with extension ".gate" spotted on ID Ransomware
+
JakubKroustek:
'.LOVE' - '
[email protected]' - https://www.virustotal.com/#/file/1c5c91bf6f4b2764070f050f0a64731cca2a68a419bfb4702cf813
2b22c7283d/detection … - #CrySiS #Dharma #ransomware
+
".LDPR" -
[email protected]https://www.bleepingcomputer.com/forums/t/696218/infected-win-7-mrcryptaolcomldpr/
+
Michael Gillespie:
#Dharma #Ransomware extension ".FREDD" spotted on ID Ransomware.
https://twitter.com/demonslay335/status/1122866935774023681
Michael Gillespie:
#Dharma #Ransomware spotted on ID Ransomware with extension ".txt"
https://twitter.com/demonslay335/status/1123362429105266690
на текущий момент известные варианты CrySis/Dharma, которые не могут быть расшифрованы без выкупа:
[QUOTE] .cesar; .arena; .cobra; .java; .write; .arrow; .bip; .cmb/.combo; .brrr; .gamma; .monro; .bkp; .btc; .bgtx; .boost; .waifu; .FUNNY; .betta; .vanss; .like; .gdb; .xxxxx; .adobe; .tron; .AUDIT; .cccmn; .back; .Bear; .fire; .myjob; .war; .risk; .bkpx; .santa; .bizer; .gif; .auf; .USA; .xwx; .best; .heets; .qwex; .ETH; .air; .888; .amber; .frend; .KARLS; .aqva; .AYE; .korea; .plomb; .NWA; .com; .azero; .bk666; .stun; .ms13; .carcn; .btix; .gate; .love; .LDPR; .FREDD; .txt[/QUOTE]
