ID Ransomware

Upload a ransom note and/or sample encrypted file to identify the ransomware that has encrypted your data.

Knowing is half the battle!
GI Joe

1 Result

Avaddon

This ransomware is decryptable!

Identified by

  • ransomnote_url: avaddonbotrxmuyl.onion
  • sample_bytes: [0x2210 - 0x2214] 0x07030301

Click here for more information about Avaddon

Ransomware Got Past Your Antivirus?

Emsisoft Anti-Malware * This is an affiliate link, and I receive commission for purchases made. I do honestly recommend Emsisoft and their products even without this affiliation.