[Cody Johnston]

Code: Select all

4998A47D1ECB8C80E3AC5BAF743E87CC3546322335EDF89CE4A9AB1EF5420F69

https://www.virustotal.com/en/file/4998 ... /analysis/

Attached.

[leeno]

I am trying to execute Ransom:Win64/Reveton.B Dll .I am unable to run this 64 Bit sample . it would be great if some one help in executing this sample .
I will appreciate if you can provide detail steps to run this sample .
I am attaching the sample pass is infected

Thanks

leeno

[Midnight-Star234]

How are you supposed to open these files? :?

[TETYYSs]

How are you supposed to open these files? :?

The ZIP file is an archive file, you'll need software like 7-zip or similar to open these.

[frame4-mdpro]

I don't want to be too scathing, but I have virtually no confidence in somebody asking how to handle archive files, let alone malware

[EP_X0FF]

I don't want to be too scathing, but I have virtually no confidence in somebody asking how to handle archive files, let alone malware :x

Quite speculative but probably he is asking how to run them, because Reveton is in dll. However this mean he doesn't read whole thread before posting his question, because how to launch reveton was discussed earlier here, even with examples.

[Midnight-Star234]

I don't want to be too scathing, but I have virtually no confidence in somebody asking how to handle archive files, let alone malware

Quite speculative but probably he is asking how to run them, because Reveton is in dll. However this mean he doesn't read whole thread before posting his question, because how to launch reveton was discussed earlier here, even with examples.

Yeah I should have read the entire thread I got them running actually well to a page saying Internet Explorer couldn't display this page but I got it working after screwing around a little bit I gotta read before I post I'm such an idiot

[harikrish093]

Hey Check out this variant of Reveton.I try find which algorithm it uses for encryption but cant if any one find pls tell Here i posted VT link

https://www.virustotal.com/en/file/823b ... /analysis/

[Cody Johnston]

Hey Check out this variant of Reveton.I try find which algorithm it uses for encryption but cant if any one find pls tell Here i posted VT link

https://www.virustotal.com/en/file/823b ... /analysis/

A few things:

1. Not everyone here has access to download files from VirusTotal, so if you want people to look at something, attach the actual sample.
2. Reveton is not known to encrypt files, so there is nothing to discover.
3. This sample is over a month old..

[Xylitol]

https://heimdalsecurity.com/blog/what-i ... rotection/

In 2012, the major ransomware strand known as Reveton started to spread. It was based on the Citadel trojan, which was, in turn, part of the Zeus family.

Heimdal security clowns are back