[heart888]

https://www.virustotal.com/en/file/3199 ... /analysis/

nemucod /downloader /downloads ransomware

wxw.dpolecnaz.top/admin.php?=1.gif

[ikolor]

next.

https://www.virustotal.com/en/file/441c ... 491590898/

https://www.virustotal.com/en/file/40d1 ... 491590879/

https://www.virustotal.com/en/file/513a ... 491586001/

[ikolor]

next ..


https://www.virustotal.com/en/file/3766 ... 493305229/

https://www.virustotal.com/en/file/6e5d ... 493304659/

[heart888]

https://www.virustotal.com/en/file/b5a2 ... /analysis/

[Antelox]

https://www.virustotal.com/en/file/b5a2 ... /analysis/

This is NemucodAES ransomware, a multipurpose javascript malware capable of encrypting file (last variant uses AES128) as well as downloading other malware families (usually Kovter).

BR,

Antelox

[markusg]

ransomware downloader

[ikolor]

hi
https://www.virustotal.com/en/file/62be ... 501935765/