ID Ransomware
Upload a ransom note and/or sample encrypted file to identify the ransomware that has encrypted your data.
Knowing is half the battle!
1 Result
Phobos
This ransomware is decryptable!
Identified by
- ransomnote_filename: info.txt
- ransomnote_keyword: !!!All of your files are encrypted!!!
- sample_bytes: 0x00 metadata divider
- custom_rule: Padding and metadata offset verified