Al-Namrood Ransomware - IOC

1) Ransomware Name - Al-Namrood
2) Encrypted Extensions -
.unavailable
.disappeared
3) Ranson Note File - Read_Me.txt
4) Encrypted Algorithm - NA
5) Decryptor link - https://www.google.com/url?q=https://decrypter.emsisoft.com/al-namrood&sa=D&ust=1498658228073000&usg=AFQjCNFFYKA3TUfUOa-NLvOptaQm_trU6w
6) Screenshots -
7) Indicators of Compromise -
decryptioncompany@inbox.ru
fabianwosar@inbox.ru
cryptservice@inbox.ru
cryptsvc@mail.ru
cryptservice@jabber.ua  
crypt64@mail.ru
crypt32@jabber.ua    
cryptcorp@inbox.ru
ransomware.attack@list.ru

Comments