Show this thread
Blank ransomware. Encrypts quite a lot of extensions and appends .blank to files. https://www.hybrid-analysis.com/sample/616b29246552573a424166a79823bb99f55b195be363d6d7003f26f26f81c389?environmentId=100 … Seems like user awareness training/educational ransomware "eduware".pic.twitter.com/5MVM6EID4t
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Seems made by someone from Poland... cc
@hasherezadeThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
It looks to target an awful amount of games like Quake 3/4 engines, WoW config files, Unity and Unreal engine, Civ5 saves, HotS, Starcraft 2 and for whatever reason even the OG Xbox executable extension?
-
Don't ask yourself why, ask: why not?
End of conversation
New conversation -
-
-
It's basically our ol' buddy HiddenTear... Looks like it gives you the password if you click on the "What the hell is my password?!" link lol, which you can feed back into it to have it auto-decrypt. Tho it decrypts files and adds ".decrypted" instead of stripping the ext.pic.twitter.com/pwtmmRSshN
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
in code is words "Użytkownik systemu Windows, wymień" - it's Polish
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Where is this magic button?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.