Magic Ransomware - IOC - File Details

1) Ransomware Name - Magic

2) Encrypted Extensions - .magic

3) Ransom Note File -
DECRYPT_ReadMe1.TXT
DECRYPT_ReadMe.TXT
DECRYPT_ReadMe1.TXT.ReadMe

4) Encrypted Algorithm - AES-256 + RSA

5) Decryptor Link - NA

6) Screenshot -

7) Indicators of Compromise -
myqjs01@gmail.com
wowaanne@mail.ru
viper1990@safe-mail.netxxxx://reloaded.orgfree.com/new/my.php
xxxx://reloaded.orgfree.com/new/your.php

8) File Details -

MD5 d7cbb988576fe7321d45cf1707c5a1e3
SHA1 2274d6fc15d578e9f117d3b2daa0cb7a3b8b313b
SHA256 93b58d1fcc749ce2846f226d3571ef56b0c437198d345dca6be8c3617db26b50
ssdeep384: a7pI18PlgjaZjLyGIMiHxPR7GCHFrBW9aaxfN7JmTngTif5KiI4ZK1UUfmfeQ: r18Ngwi9pyCHFNWPdsngTM4iB4UBfe
authentihash  8457f876591ce3998339a945215e2ee6ccb0ff77c3010e057132a2167cfd7cb6
imphash  f34d5f2d4577ed6d9ceec516c1f5a744
The size of the file is 26.0 KB (26624 bytes)
Win32 EXE file type
DescriptionPE32 executable for MS Windows (GUI) Intel 80386 Mono / .Net assembly

Comments