ICYMI: Nemucod ransomware information:
https://bartblaze.blogspot.com/2016/04/nemucod-ransomware-information.html … (Thanks @hahn_katja for a slight correction).
#Nemucod #ransomware
-
-
Replying to @bartblaze
@bartblaze@hahn_katja For me the dropped files were 4284bb11a07c.exe (7zip), a0.exe, and a085e1.exe.1 reply 0 retweets 1 like -
Replying to @BleepinComputer
@BleepinComputer@hahn_katja Is that from the most recent spam run (April) or March?2 replies 0 retweets 0 likes -
Replying to @bartblaze
@bartblaze@hahn_katja Also its the one that uses 7Zip1 reply 0 retweets 1 like -
Replying to @BleepinComputer
@BleepinComputer@hahn_katja Right. Was late yesterday when checking, but I when you catch the encrypting in the act, you can get the key.2 replies 0 retweets 0 likes -
Replying to @bartblaze
@BleepinComputer@hahn_katja I'll need to check this out again later tonight though. Also not sure if@fwosar has made any progress.1 reply 0 retweets 0 likes -
Replying to @bartblaze
@bartblaze@BleepinComputer@hahn_katja I didn't look into it yet.1 reply 0 retweets 0 likes
@fwosar @BleepinComputer @hahn_katja No worries, I'll let you know if/when I find something more substantial. Thanks for all your work!
-
-
Replying to @bartblaze
@bartblaze@BleepinComputer@hahn_katja Well, it all depends on the implementation of Math.Random() in the JavaScript engine being used.0 replies 0 retweets 1 likeThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.