VoidCrypt勒索病毒家族详情

相关阅读：VoidCrypt勒索病毒家族分析
勒索病毒家族名称：VoidCrypt勒索病毒家族详情
是否支持解密：否
详情：
被加密文件：
被加密文件后缀格式： 文件后缀被修改为[mail][id].void

勒索提示信息：
文件名：
文件内容 ：
-------------------------------------------------------------------------------
Your Files has Been Encrypted

Your Files Has Been Encrypted with AES + RSA Algorithm
If You Need Your Files You Have To Pay Decryption Price
You can Send Some Little Files Less Than 1MB for Test (The Test Files Should not Contain valuable Data Like Databases Large Excel Sheets or Backups
After 48 Hour Decryption Price Will be Doubled so You Better Contact us Before Times Up
Using Recovery Tools or 3rd Party Application May cause Damage To Your Files And increase price

The Steps You Should Do To Get Your Files Back:
1- Contact Email on Files And Send ID on The Files Then Do agreement on a Price
2- Send Some Files for Decryption Test ( Dont Pay to Anyone Else who is Not Able to Decrypt Your Test Files!)
After Geting Test Files Pay The price in Bitcoin And Get Decryption Tool + RSA key


Your Case ID :0HJ2IBSWF4DMXKP
Our Email : DECRPToffice@gmail.com
In Case Of No Answer : DECRPT@tutanota.com
-------------------------------------------------------------------------------
弹窗：

防护建议：
1.多台机器，不要使用相同的账号和口令
2.登录口令要有足够的长度和复杂性，并定期更换登录口令
3.重要资料的共享文件夹应设置访问权限控制，并进行定期备份
4.定期检测系统和软件中的安全漏洞，及时打上补丁。
5.定期到服务器检查是否存在异常。查看范围包括：
a)是否有新增账户
b) Guest是否被启用
c) Windows系统日志是否存在异常
d)杀毒软件是否存在异常拦截情况
6.安装安全防护软件，并确保其正常运行。
7.从正规渠道下载安装软件。
8.对不熟悉的软件，如果已经被杀毒软件拦截查杀，不要添加信任继续运行。

Your Files Are Has Been Locked

Your Files Has Been Encrypted with cryptography Algorithm

If You Need Your Files And They are Important to You, Dont be shy Send Me an Email

Send Test File + The Key File on Your System (File Exist in C:/ProgramData example : RSAKEY-SE-24r6t523 pr RSAKEY.KEY) to Make Sure Your Files Can be Restored




Get Decryption Tool + RSA Key AND Instruction For Decryption Process



Attention:

1- Do Not Rename or Modify The Files (You May loose That file)

2- Do Not Try To Use 3rd Party Apps or Recovery Tools ( if You want to do that make an copy from Files and try on them and Waste Your time )

3-Do not Reinstall Operation System(Windows) You may loose the key File and Loose Your Files



Your Case ID :MJ-BV5972480613

OUR Email    :Sunjun3412@onionmail.org

in Case of no answer: Sunjun3416@zohomail.com

您的文件已被锁定

您的文件已使用加密算法加密

如果您需要文件并且它们对您很重要，请不要害羞，请给我发送电子邮件

获取解密工具 + RSA 密钥和解密过程说明

您的案例编号：MJ-GC7950184236

我们的电子邮件：karasikharry25@gmail.com

Your Files Are Has Been Locked

Your Files Has Been Encrypted with cryptography Algorithm

If You Need Your Files And They are Important to You, Dont be shy Send Me an Email

Get Decryption Tool + RSA Key AND Instruction For Decryption Process

Your Case ID :MJ-GC7950184236

OUR Email    : karasikharry25@gmail.com

Read-this.txt
1.jpg.[whirmx@gmail.com][MJ-QH5349682710].lambda
All Your Files Has Been Encrypted



You Have to Pay to Get Your Files Back



1-Go to C:\ProgramData\ or in Your other Drives   and send us prvkey.txt.key  file  



2-You can send some file little than 1mb for Decryption test to trust us But the test File should not contain valuable data



3-Payment should be with Bitcoin


4-Changing Windows without saving prvkey.txt.key file will cause permanete Data loss


Our Email:whirmx@gmail.com



in Case of no Answer:whirmx@tutanota.com

家族：VoidCrypt
被加密文件后缀:viod
黑客邮箱：DECRPToffice@gmail.com

家族：VoidCrypt
被加密文件后缀:viod
黑客邮箱：DECRPT@tutanota.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：Hichkasam@protonmail.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：helpdiamond@protonmail.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：missdecryptor@protonmail.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：VoidFiles@tutanota.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：VoidFiles@protonmail.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：Pentagon11@protonmail.com]

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：guaranteedsupport@protonmail.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：guaranteedsupport@protonmail.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：coronavirus19@tutanota.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：ghostmax@cock.li

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：decrypterfile@mailfence.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：hosdecoder@aol.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：hosdecoder@aol.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：sleepme134@gmail.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：sleepme134@gmail.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：sleepme134@gmail.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：sleepme134@gmail.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱：colderman@mailfence.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱/Url：xtredboy@protonmail.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱/Url：worcservice@protonmail.ch

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱/Url：unl0ckerpkx@tutanota.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱/Url：stevenxx134@gmail.com.exe

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱/Url：stevenxx134@gmail.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱/Url：steven77xx@mail.ru

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱/Url：sleepme134@gmail.com

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱/Url：scarry5@horsefucker.org

家族：VoidCrypt
被加密文件后缀:void
黑客邮箱/Url：scarry38@horsefucker.org