https://www.botnets.fr/index.php?action=history&feed=atom&title=Ransom.EY Ransom.EY - Revision history 2026-10-24T02:55:15Z Revision history for this page on the wiki MediaWiki 1.43.11 https://www.botnets.fr/index.php?title=Ransom.EY&diff=12292&oldid=prev Eric.freyssinet: Text replacement - "=Unknown" to "=" 2015-08-08T13:45:11Z <p>Text replacement - &quot;=Unknown&quot; to &quot;=&quot;</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 13:45, 8 August 2015</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l51">Line 51:</td> <td colspan="2" class="diff-lineno">Line 51:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>   37.221.162.6 /i.php?a=866 20/11/12</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>   37.221.162.6 /i.php?a=866 20/11/12</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Alias=Ransomgerpo</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Alias=Ransomgerpo</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>|Target=<del style="font-weight: bold; text-decoration: none;">Unknown</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>|Target=</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>|UserAgent=<del style="font-weight: bold; text-decoration: none;">Unknown</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>|UserAgent=</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>|CCProtocol=<del style="font-weight: bold; text-decoration: none;">Unknown</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>|CCProtocol=</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>|Status=<del style="font-weight: bold; text-decoration: none;">Unknown</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>|Status=</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|BeginYear=2011</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|BeginYear=2011</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|EndYear=2013-02-13</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|EndYear=2013-02-13</div></td></tr> <!-- diff cache key wiki:diff:1.41:old-4535:rev-12292:php=table --> </table> Eric.freyssinet https://www.botnets.fr/index.php?title=Ransom.EY&diff=4535&oldid=prev Eric.freyssinet at 23:07, 30 July 2015 2015-07-30T23:07:38Z <p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 23:07, 30 July 2015</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l50">Line 50:</td> <td colspan="2" class="diff-lineno">Line 50:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Http get:</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Http get:</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>   37.221.162.6 /i.php?a=866 20/11/12</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>   37.221.162.6 /i.php?a=866 20/11/12</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>|<del style="font-weight: bold; text-decoration: none;">Illustrations</del>=<del style="font-weight: bold; text-decoration: none;">{{Illustrations associées}}</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>|<ins style="font-weight: bold; text-decoration: none;">Alias</ins>=<ins style="font-weight: bold; text-decoration: none;">Ransomgerpo</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">|Target=Unknown</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|UserAgent=Unknown</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|UserAgent=Unknown</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|CCProtocol=Unknown</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|CCProtocol=Unknown</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">|Target=Unknown</del></div></td><td colspan="2" class="diff-side-added"></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Status=Unknown</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Status=Unknown</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|BeginYear=2011</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|BeginYear=2011</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|EndYear=2013-02-13</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|EndYear=2013-02-13</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>|Group=Police lock</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>|Group=Police lock<ins style="font-weight: bold; text-decoration: none;">, Ransomware,</ins></div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>|<del style="font-weight: bold; text-decoration: none;">Alias</del>=<del style="font-weight: bold; text-decoration: none;">Ransomgerpo</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>|<ins style="font-weight: bold; text-decoration: none;">Illustrations</ins>=<ins style="font-weight: bold; text-decoration: none;">{{Illustrations associées}}</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Vendor1=Symantec</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Vendor1=Symantec</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Victime4=</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Victime4=</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>}}</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>}}</div></td></tr> <!-- diff cache key wiki:diff:1.41:old-1533:rev-4535:php=table --> </table> Eric.freyssinet https://www.botnets.fr/index.php?title=Ransom.EY&diff=1533&oldid=prev Eric.freyssinet: 1 revision imported 2015-02-04T22:04:14Z <p>1 revision imported</p> <p><b>New page</b></p><div>{{Botnet<br /> |Introduction=* n&#039;est pas un silent Winlocker.<br /> * la localisation est propre au binaire semble-il.<br /> * Un de ses développeurs/administrateurs aurait été interpellé à Dubaï suite à une enquête de la police espagnole.<br /> <br /> md5 (most of them provided by Symantec) :<br /> 2a343e2840ad4c38e00aa2d4f0a18d63<br /> 5841bd6493edf3c8539d72a1515cdd73<br /> 058923fb0cc862790d2a97bdd4b28884<br /> 335cbb6129efeb0b79dc2fe50ebb42b1<br /> f76264b3f771e757a0c22799d22e0ac7<br /> 308424e866c86dc979cf13cad2a98b0d<br /> 5f98dd6149ac85b6d5f50a613dda4212<br /> 5cedfeab91a1de56878e9f3fa9626a17<br /> cedfe0b8fdd42c735af26549963da480<br /> 1e698a07158acc2b2146455cb396661b<br /> bde20108f9d0def9e97476661aff3452<br /> 5393d2384faa8e87f8066771833f5a0d<br /> 8ddf6006aebdef3d9fc6b5348b63d9c3<br /> 30cd69fe28bae14bda5a5e04867368aa<br /> 31c12b227ed897fb44cfff1620411afc<br /> 4dcc387dda16a82badcba27ddda3ae29<br /> 76951ff824e90ea2f1f15f101097ffc3<br /> 50aafd2ec42cf21c237d6146da8bb4ec<br /> c7d9a6ee7b2fa9857b4b9be224cc3821<br /> 89c7b959e1146673515a66736b1ce11b<br /> 2d16bb9add3f91b2100001a6fce0af9a<br /> 6ec959eb9b0d3615aa73f4f36d9304d2<br /> 046d5e83393c1db9337fe8fc1e75665c<br /> c6232038564c1be8554364a59ca2d5b0<br /> 541662fe54e7607fcccba98051ebed36<br /> 9e944dabf9c9f8bc0ff6ec0dedce4455<br /> 0535086fb1b7d8a37b2c9dd16f9a805d<br /> 25d6614cfc404230d25acfcafb437964<br /> 73cecdbb872be4a7696d3d4c0e19ab09<br /> 6bec7eedd51991f582d740ab4ab523e1<br /> 239c06e68877d91687ba5ed1ccd6c105<br /> ec099770bebc022be1bde101f82c884a<br /> ef3a5eb4a85a388edf7a7e083136edc4<br /> 4e4bd9a5c01ed4ea01bd3246f16bae0c<br /> 95683e88c71ee372314ad8953ce9e241<br /> e2bb0028313ba43a2a92da484dea5a35<br /> caff8f57c1c650843bdc71daf398d2c3<br /> 1d8c4a3320d0abad037311ae3fd9fbe2<br /> 430f57a5cffdf698cd9c97d86062252d<br /> 65e9ef4efd7366d659f3acece1370c07<br /> 6ac9f81c2be49c77dbec0ad5f6fc95c6<br /> 2a343e2840ad4c38e00aa2d4f0a18d63 20/11/12<br /> <br /> Http get:<br /> 37.221.162.6 /i.php?a=866 20/11/12<br /> |Illustrations={{Illustrations associées}}<br /> |UserAgent=Unknown<br /> |CCProtocol=Unknown<br /> |Target=Unknown<br /> |Status=Unknown<br /> |BeginYear=2011<br /> |EndYear=2013-02-13<br /> |Group=Police lock<br /> |Alias=Ransomgerpo<br /> |Vendor1=Symantec<br /> |Victime4=<br /> }}</div> Eric.freyssinet