[275751198]

Recently rampant ransomware varied quinkly. Last night , I found a Ransom in bat when I ran a JS.Downloader.

360390.zip

(2.76 KiB) Downloaded 64 times

downloader1.zip

(4.82 KiB) Downloaded 71 times

[fonavozia]

>encrypted using strong RSA-1024 algorithm with a unique key
>xor with static alphanumeric string
Sounds good.

[fonavozia]

Interestingly the malware exe web sites giving different exe without the "rnd" GET parameter (attached).