A forum for reverse engineering, OS internals and malware analysis
Anyone got a copy of the decrypter you get if you pay the ransom ?
Attachments
(301.75 KiB) Downloaded 83 times
ikolor wrote:Please upload the sample and not an encrypted file
@xorsthingsv2
Attachments
(158.5 KiB) Downloaded 71 times
ikolor wrote:next
https://www.virustotal.com/en/file/4ef2 ... 473348995/
Smoke Loader
ikolor wrote: next..Teerac - Torrent Locker variant with sub domain generation algorithm
https://www.virustotal.com/en/file/e755 ... 473862240/
ikolor wrote: next..Encoded data - looks like a locky download by javascript if I had to guess
https://www.virustotal.com/en/file/83fd ... 473881070/
It uses a new extension, '.odin'
Attachments
password:infected
(191.25 KiB) Downloaded 95 times
(191.25 KiB) Downloaded 95 times
@xorsthingsv2
Locky is now using .odin extension.
Attached file came through email.
pass - infected123
Attached file came through email.
pass - infected123
Attachments
(12.5 KiB) Downloaded 78 times
Attachments
(143.98 KiB) Downloaded 66 times
