Ransomware Chronicle 2016 - Privacy PC
Tags
country: Argentina Belgium Brazil Canada China Croatia Netherlands Germany France Hungary India Indonesia Italy Portugal Serbia Turkey Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Bootkit - T1542.003 Botnet - T1583.005 Botnet - T1584.005 Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Bootkit - T1067 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 990bcc4c-d6cd-4dbe-aa5f-e6bf2fedcb29
Fingerprint bc7490d93aa4969f
Analysis status DONE
Considered CTI value 0
Text language
Published June 9, 2018, 5:51 p.m.
Added to db Jan. 18, 2023, 7:59 p.m.
Last updated Nov. 17, 2024, 5:54 p.m.
Headline Ransomware Chronicle 2016
Title Ransomware Chronicle 2016 - Privacy PC
Detected Hints/Tags/Attributes 380/3/79
Source URLs
Redirection Url
Details Source http://privacy-pc.com/articles/ransomware-chronicle-2016.html
URL Provider
Details Provider Source level domain
Details privacy-pc.com privacy-pc.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
juicylemon.biz
Details Domain 158 
aol.com
Details Domain 29 
bk.ru
Details Domain 287 
yahoo.com
Details Domain 155 
yandex.com
Details Domain 99 
india.com
Details Domain 2 
pizzacrypts.info
Details Domain 54 
mail2tor.com
Details Domain 29 
sigaint.org
Details Domain 396 
protonmail.com
Details Domain 136 
mail.com
Details Domain 20 
inbox.ru
Details Domain 29 
dr.com
Details Email 1 
support@juicylemon.biz
Details Email 1 
dr.jimbo@bk.ru
Details Email 3 
kozy.jozy@yahoo.com
Details Email 3 
towerweb@yandex.com
Details Email 1 
unlock92@india.com
Details Email 1 
id-[unique_victim_id]-maestro@pizzacrypts.info
Details Email 1 
flyper01@sigaint.org
Details Email 1 
realfsociety@sigaint.org.fsociety
Details Email 3 
venisransom@protonmail.com
Details Email 2 
support.code@aol.com
Details Email 1 
cuzimvirus@yahoo.com
Details Email 3 
santa_helper@protonmail.com
Details Email 2 
unlockvt@india.com
Details Email 3 
thedon78@mail.com
Details Email 3 
rescuers@india.com
Details Email 5 
amagnus@india.com
Details Email 2 
cryptcorp@inbox.ru
Details Email 3 
alex.vas@dr.com
Details Email 2 
opentoyou@india.com
Details Email 3 
mkgoro@india.com
Details File 2 
enigma_encr.txt
Details File 2 
文件解密帮助.txt
Details File 2 
unlock_files_instructions.txt
Details File 3 
read_this_to_decrypt.html
Details File 55 
read_it.txt
Details File 4 
read_this_file.txt
Details File 3 
unlock_files_instructions.html
Details File 3 
cryptinfo.txt
Details File 243 
autorun.inf
Details File 44 
readme.html
Details File 2 
pizzacrypts.inf
Details File 2 
_recover_instructions.ini
Details File 1 
smrss32.exe
Details File 1 
rarvault.htm
Details File 140 
files.txt
Details File 14 
readme_for_decrypt.txt
Details File 33 
read_me.txt
Details File 21 
encrypted.txt
Details File 2 
help_dcfile.txt
Details File 2 
_howdo_text.html
Details File 1 
fsociety.html
Details File 2 
enigma_info.txt
Details File 1 
explanations.html
Details File 2 
_what_is.html
Details File 4 
recover.bmp
Details File 9 
recover.txt
Details File 2 
jack.pot
Details File 1 
createsreadthisfileimportant.txt
Details File 2 
ransomed.html
Details File 5 
enc.txt
Details File 8 
decrypt_your_files.html
Details File 1 
-instruction.html
Details File 2 
000-please-read-we-help.html
Details File 2 
restore_corupted_files.html
Details File 2 
dale_files.txt
Details File 2 
_help_your_files.html
Details File 79 
file.txt
Details File 29 
decrypt.txt
Details File 4 
restore_your_files.txt
Details File 2 
check-it-help-files.html
Details File 4 
more.html
Details File 3 
how_to_restore_files.txt
Details File 2 
where-your-files.html
Details IPv4 2 
115.22.15.0
Details IPv4 2 
114.23.16.0
Details IPv4 6 
91.239.24.0