Alex-2k17

Recovers files yako - .HakunaMatata - encrypted!

Recommended Posts

Hi guys,

our Server got attacked - successfully.

The attack was on 13.01.2017 at about 8:50 pm.

 

The ransomware encrypted almost any files on the server and added ".HakunaMatata" to them.

It also put a html file called "Recovers files yako.html" in every folder.

 

I saw an ecrypted log file of the eset antivirus uninstallation at the same time stamp.

It also killed our Acronis backup software.

 

Is there a way to encrypt my files?

I added the files to the post

 

Thanks a lot and kind regards from Germany!

AblInfo.dbf.HakunaMatata

Recovers_files_yako.pdf

Share this post


Link to post
Share on other sites

We payed the bill of 2 BitCoins and got the software to decrypt the files. It's working!

 

I can offer the program but you still need your specific private key.

I can also offer a few of my encrypted files, the public key and the software to decrypt.

Maybe someone can "hack" the ransomware.

 

The Software runs offline.

  • Upvote 1

Share this post


Link to post
Share on other sites

This particular infection is NMoreira 2.0.  To have any chance of reversing the encryption algorithm we would need the installer responsible for installing the ransomware.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.