AiraCrop Ransomware_IOC

1) Ransomware Name - AiraCrop
2) Encrypted Extensions - ._AiraCropEncrypted
3) Ransom Note File - How to decrypt your files.txt
4) Encrypted Algorithm - NA
5) Decryptor Link - NA
6) Screenshots -
7) Indicators of Compromise -
http: //6kaqkavhpu5dln6x.onion
http: //mvy3kbqc4adhosdy.onion
8) File Details -
MD5 7d27a5f7b39222e2f29e25a3db52e60f
SHA1 198ad2c5945aad98245fec33f120d751939d24be
SHA256 43c3f9c3f8798f21a6aea01efb5d6d7c1501482fecaad976f9825320261c90b4
ssdeep6144:x1+GlPY/151Utu4WARP8/HJFWV2IDfovIbw7ZhkxkN8LXp:xNlI1HYuoRk/fWV2M4IbYkxkN
authentihash  b207eb80cbe1fe1238f7cf3ddc00f703bb910441251863b7e79825401ff5f39d
imphash  6cde44b21731a639177b87620192993f
File size 289.5 KB ( 296448 bytes )
File type Win32 EXE
Magic literalPE32 executable for MS Windows (GUI) Intel 80386 32-bit

Comments