Ransom.II

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Ransom.II
Alias	Madlerax.A
Group	Police lock
Parent
Sibling
Family
Relations	Variants: Sibling of: Parent of: Distribution of: Campaigns:
Target
Origin
Distribution vector
UserAgent
CCProtocol
Activity	/
Status
Language
Programming language
Operation/Working group

Introduction

Memo :

 http://95.163.104.80/spielberg/start.php -->   http://95.163.104.80/spielberg/yo/index_FR.php
 http://95.163.104.80/bull/start.php
 http://95.163.104.80/elite/start.php  
 95.172.154.96/spielberg/start.php
 95.163.104.91:80/payz/stat.php 27/09/12
 Gimemo design rip

 a7768f4973ad7cf8217212a4d12dbae0
 aaa8ae9c48dbe5f81ea179c143761c5e
 c7293055264d4e4cdfc547f68fdfae86
 cf22812636722986cc6ed92abf071909
 0974369585b22f28aa524ebbcf1c7564 04/09/2012
 fe9822e9637ecfd350b924a13407e6cf 27/09/12

Features

Associated images

Checksums / AV databases

Publications

	Author	Editor	Year
AutoIT ransomware	Hugo Caron	Malware.lu	2012
Ransom.II - UGC payment for USA - Windows Genuine impersonation for DE	Kafeine		2012
Winlock affiliate	Xylitol	Xylitol	2012

Copies d'écran

Version DE (08/2012)	Version DE bis (08/2012)	Version USA (08/2012)
Version Default (07/2012)	Version AT (07/2012)	Version BE FR (07/2012)
Version BE NL (07/2012)	Version ES (07/2012)	Version FR (07/2012)
Version GR (07/2012)	Version IT (07/2012)	Version NL (07/2012)
Version PT (07/2012)	Version USA (07/2012)	Version DE (07/2012)
Default Celas (if no localisation) (June 2012)	Version ES SGAE(June 2012)	Version DE Gema (June 2012)
Version PT Spautores(June 2012)	Version IT SIAE (June 2012)	File:Undefined-05 FR.png Version FR Sacem(June 2012)
Version NL Buma Stemra (June 2012)	Version GR (June 2012)	Version AT Akm(June 2012)
Version BE (fr) SABAM(June 2012)	Version BE (nl) SABAM(June 2012)