| | 1 | + | <!DOCTYPE html> |
| | 2 | + | <html lang="en"><head><meta charset="UTF-8"><style> |
| | 3 | + | body{ |
| | 4 | + | height: 100vh; |
| | 5 | + | display: flex; |
| | 6 | + | align-items: center; |
| | 7 | + | justify-content: center; |
| | 8 | + | background-color: black; |
| | 9 | + | } |
| | 10 | + | h1{ |
| | 11 | + | font-family: 'Oswald', sans-serif; |
| | 12 | + | text-transform: uppercase; |
| | 13 | + | font-size: 90%; |
| | 14 | + | text-align: left; |
| | 15 | + | color: white; |
| | 16 | + | } |
| | 17 | + | span{ |
| | 18 | + | display: inline-block; |
| | 19 | + | } |
| | 20 | + | .container { |
| | 21 | + | overflow: hidden; |
| | 22 | + | background-color: black; |
| | 23 | + | height: 100%; |
| | 24 | + | } |
| | 25 | + | .container { |
| | 26 | + | color: white; |
| | 27 | + | display: -webkit-flexbox; |
| | 28 | + | display: -ms-flexbox; |
| | 29 | + | display: -webkit-flex; |
| | 30 | + | display: flex; |
| | 31 | + | -webkit-flex-align: center; |
| | 32 | + | -ms-flex-align: center; |
| | 33 | + | -webkit-align-items: center; |
| | 34 | + | align-items: center; |
| | 35 | + | justify-content: center; |
| | 36 | + | } |
| | 37 | + | </style></head> |
| | 38 | + | <body><link href='https://fonts.googleapis.com/css?family=Oswald:300' rel='stylesheet' type='text/css'> |
| | 39 | + | <div class="container"><pre class="center" id="d"></pre></div><script> |
| | 40 | + | var pretag = document.getElementById("d"); |
| | 41 | + | var tmr1 = undefined, |
| | 42 | + | tmr2 = undefined; |
| | 43 | + | var A = 1, |
| | 44 | + | B = 1; |
| | 45 | + | var asciiframe = () => { |
| | 46 | + | var b = []; |
| | 47 | + | var z = []; |
| | 48 | + | A += 0.07; |
| | 49 | + | B += 0.03; |
| | 50 | + | var cA = Math.cos(A), |
| | 51 | + | sA = Math.sin(A), |
| | 52 | + | cB = Math.cos(B), |
| | 53 | + | sB = Math.sin(B); |
| | 54 | + | for (var k = 0; k < 1760; k++) { |
| | 55 | + | b[k] = k % 80 == 79 ? "\n" : " "; |
| | 56 | + | z[k] = 0; |
| | 57 | + | } |
| | 58 | + | for (var j = 0; j < 6.28; j += 0.07) { |
| | 59 | + | var ct = Math.cos(j), |
| | 60 | + | st = Math.sin(j); |
| | 61 | + | for (i = 0; i < 6.28; i += 0.02) { |
| | 62 | + | var sp = Math.sin(i), |
| | 63 | + | cp = Math.cos(i), |
| | 64 | + | h = ct + 2, // R1 + R2*cos(theta) |
| | 65 | + | D = 1 / (sp * h * sA + st * cA + 5), |
| | 66 | + | t = sp * h * cA - st * sA; |
| | 67 | + | var x = 0 | (40 + 30 * D * (cp * h * cB - t * sB)), |
| | 68 | + | y = 0 | (12 + 15 * D * (cp * h * sB + t * cB)), |
| | 69 | + | o = x + 80 * y, |
| | 70 | + | N = |
| | 71 | + | 0 | |
| | 72 | + | (8 * |
| | 73 | + | ((st * sA - sp * ct * cA) * cB - |
| | 74 | + | sp * ct * sA - |
| | 75 | + | st * cA - |
| | 76 | + | cp * ct * sB)); |
| | 77 | + | if (y < 22 && y >= 0 && x >= 0 && x < 79 && D > z[o]) { |
| | 78 | + | z[o] = D; |
| | 79 | + | b[o] = ".,-~:;=!*#$@"[N > 0 ? N : 0]; |
| | 80 | + | } |
| | 81 | + | } |
| | 82 | + | } |
| | 83 | + | pretag.innerHTML = b.join(""); |
| | 84 | + | }; |
| | 85 | + | setInterval(asciiframe, 50) |
| | 86 | + | </script><h1><pre> |
| | 87 | + | So what happened? |
| | 88 | + | |
| | 89 | + | All files are encrypted with Integrated Encryption Scheme. |
| | 90 | + | The file structure was not damaged. You have been assigned a unique identifier. |
| | 91 | + | After infection, you have 96 hours to declare decryption. |
| | 92 | + | |
| | 93 | + | After the expiration of 96 hours, decryption cost will be automatically increased. |
| | 94 | + | Now you should send us message with your personal ID, which is at the bottom of the message. |
| | 95 | + | We hope that you understand the importance of the work we have done. |
| | 96 | + | |
| | 97 | + | Before paying you can send us 2 files for free decryption. |
| | 98 | + | The total size of files must be less than 2Mb. |
| | 99 | + | Files should not contain valuable information (databases, backups, large excel sheets, etc..). |
| | 100 | + | |
| | 101 | + | Attention! If you want to RECOVER YOUR DATA without problems - NEVER!!! : |
| | 102 | + | reboot, disconnect hard drives or take any action unless you know WHAT YOU ARE DOING!!! |
| | 103 | + | Otherwise, we cannot be 100% sure that the decryptor will work correctly. |
| | 104 | + | |
| | 105 | + | !!!THIS IS ESPECIALLY RELATED TO ESXI!!! |
| | 106 | + | |
| | 107 | + | If you will try to use any third party software for restoring your data or antivirus solutions: |
| | 108 | + | this can lead to complete damage to all files and their irrecoverable loss. |
| | 109 | + | Any changes in encrypted files may entail damage of the private key and the loss of all data. |
| | 110 | + | |
| | 111 | + | Your personal id: [snip] |
| | 112 | + | Username and password are identical to above. |
| | 113 | + | |
| | 114 | + | Since we are using SSL encryption as well as .onion, the certificate is not properly signed. |
| | 115 | + | So in order to get into the chat, you need to confirm the insecure connection exception. |
| | 116 | + | Or just use our embeded APP (Windows version only for now). Thank you for understanding. |
| | 117 | + | |
| | 118 | + | You can download TOX here: |
| | 119 | + | https://tox.chat/download.html |
| | 120 | + | |
| | 121 | + | You can also write to the chat located in TOR network at: |
| | 122 | + | https://qkbbaxiuqqcqb5nox4np4qjcniy2q6m7yeluvj7n5i5dn7pgpcwxwfid.onion |
| | 123 | + | |
| | 124 | + | You can download TOR browser here: |
| | 125 | + | https://www.torproject.org/download/ |
| | 126 | + | |
| | 127 | + | our TOX below: |
| | 128 | + | D3404141459BC7206CC4AFEC16A3403F262C0937A732C12644E7CA97F0615201A519F7EAB2E2 |
| | 129 | + | |
| | 130 | + | We hope you carefully read this message and already know what to do. |
| | 131 | + | </pre></h1></body></html> |
| | 132 | + | |
ThreatLabz
committed
1 year ago
1 parent 2941c306