Upload a ransom note and/or sample encrypted file to identify the ransomware that has encrypted your data.
Knowing is half the battle!
This ransomware has no known way of decrypting data at this time.
It is recommended to backup your encrypted files, and hope for a solution in the future.
- ransomnote_filename: how_to_decrypt.hta
- sample_extension: [<email>].[<id>]
- sample_bytes: [0xF56E5 - 0xF56F3] 0x7B454E4352595054454E4445447D
Would you like to be notified if there is any development regarding this ransomware? Click here.