LANRansomware 48877a3a -- Delphi folder-reserved-by-lan-encryptor AES-ECB-CTR dot-encrypted-extension how-to-decrypt-txt stealth-mode wipeonly-flag WSAStartup-network-scan 11-sections-TLS | Yuksek

Dosya Kimligi

Yetenekler

folder_reserved_by_lan_encryptor   <- ag paylasimlari sifrelemesi\nfolder_reserved_by_local_encryptor <- yerel sifrelemesi\nAll wiper threads is finished, but network scan still in progress\n  => Network scan: ag uzerindeki hedef aranir ve sifrelenir

Sifreleme Modlari

AES-ECB modu: EncryptECB / DecryptECB\nAES-CTR modu: cmCTR AEScipher\nAESFixed     <- sabit anahtar modu\n\nDosya uzantilari:\n  e.-encrypted  f.-encrypted  fast encrypted\n  -ENCRYPTED    .-encrypted\n\nFidye notu: how_to_decrypt.txt

Komut Satiri Secenekleri

/stealth   <- sifreleme sureci gizli modda calisir\n/p [sifre] <- sifreleme anahtari icin parola (zorunlu: /stealth ile)\n/wipeonly  <- dosya sifrele degil sil (tam yok etme modu!)\n\nCMDListProcessor <- komut listesi isleyici\ncmd_list         <- komut sirasi\nSelfTests        <- dahili test sistemi (profesyonel yazilim kalitesi)

Teknik Detaylar

File already encrypted in stealth mode. Try to rename file.\nWARNING: Can't create or open TXT file.\nWARNING: Can't increase file size. Skip file.\nHINT: how_to_decrypt.txt file, NTUSER.DAT file, wipe file...\n\nWSAStartup socket  <- ag soket erisimi (LAN scan icin)\nAbility to use sockets test (WSAStartup) -\nTMonitor.PW        <- Delphi sinif izleme nesnesi

IOC