ID Ransomware
Upload a ransom note and/or sample encrypted file to identify the ransomware that has encrypted your data.
Knowing is half the battle!
1 Result
Dharma (.cezar Family)
This ransomware has no known way of decrypting data at this time.
It is recommended to backup your encrypted files, and hope for a solution in the future.
Identified by
- ransomnote_email: [email protected]
- sample_extension: .id-<id>.[<email>].gamma
- sample_bytes: [0x18020 - 0x18060] 0x00000000020000000CFE7A410000000000000000000000002000000000000000
- custom_rule: Original filename "CT_KM_tang_bia_TIGER_tu_2-12-2013.xls" after filemarker
Click here for more information about Dharma (.cezar Family)
Would you like to be notified if there is any development regarding this ransomware? Click here.