Ransom.II

The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Ransom.II
Alias	Madlerax.A
Group	Police lock
Parent
Sibling
Family
Relations	Variants: Sibling of: Parent of: Distribution of: Campaigns:
Target
Origin
Distribution vector
UserAgent
CCProtocol
Activity	/
Status
Language
Programming language
Operation/Working group

Introduction

Memo :

 http://95.163.104.80/spielberg/start.php -->   http://95.163.104.80/spielberg/yo/index_FR.php
 http://95.163.104.80/bull/start.php
 http://95.163.104.80/elite/start.php  
 95.172.154.96/spielberg/start.php
 95.163.104.91:80/payz/stat.php 27/09/12
 Gimemo design rip

 a7768f4973ad7cf8217212a4d12dbae0
 aaa8ae9c48dbe5f81ea179c143761c5e
 c7293055264d4e4cdfc547f68fdfae86
 cf22812636722986cc6ed92abf071909
 0974369585b22f28aa524ebbcf1c7564 04/09/2012
 fe9822e9637ecfd350b924a13407e6cf 27/09/12

Features

Associated images

Checksums / AV databases

Publications

	Author	Editor	Year
AutoIT ransomware	Hugo Caron	Malware.lu	2012
Ransom.II - UGC payment for USA - Windows Genuine impersonation for DE	Kafeine		2012
Winlock affiliate	Xylitol	Xylitol	2012

Copies d'écran

Version DE (08/2012)	Version DE bis (08/2012)	Version USA (08/2012)
Version Default (07/2012)	Version AT (07/2012)	Version BE FR (07/2012)
Version BE NL (07/2012)	Version ES (07/2012)	Version FR (07/2012)
Version GR (07/2012)	Version IT (07/2012)	Version NL (07/2012)
Version PT (07/2012)	Version USA (07/2012)	Version DE (07/2012)
Default Celas (if no localisation) (June 2012)	Version ES SGAE(June 2012)	Version DE Gema (June 2012)
Version PT Spautores(June 2012)	Version IT SIAE (June 2012)	File:Undefined-05 FR.png Version FR Sacem(June 2012)
Version NL Buma Stemra (June 2012)	Version GR (June 2012)	Version AT Akm(June 2012)
Version BE (fr) SABAM(June 2012)	Version BE (nl) SABAM(June 2012)