Smok3d

Possible new variant of dharma?

Recommended Posts

Hi,

I am trying to figure out what encryption this ransomware is using......
ID Ransomware says it is a dharma variant I cannot get either decryter to work. Thought it may be an Amnesia variant but that does not work either.

Has the 830s7 extension. Ransom note:

See what you can find out about this virus
... * ALL YOUR WORK AND PERSONAL FILES HAVE BEEN ENCRYPTED *
To decrypt your files you need to buy the special software – «Nemesis decryptor»
You can find out the details / buy decryptor + key / ask questions by email: [email protected]
 
Any help would be much appreciated.
 
EDIT: I am told it is CryptON variant but the decrypter gives error with file pair.
 
Cheers
Edited by Smok3d
update

Share this post


Link to post
Share on other sites

@Cesar1986 
Not as of yet. I am told this is a variant of the Crypton ransomware, some are referring to it as cry36 for the 36 byte file size difference. Still awaiting news on decryption tool.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.