STRLCPY/ransomware_notes

add trigona ransom note
ThreatLabz committed 1 year ago

fcc4611d

1 parent e6da2614

Total 1 files

■ ■ ■ ■ ■ ■

trigona/how_to_decrypt.hta

1	+	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
2	+	<html>
3	+	<title>ENCRYPTED</title>
4	+	<hta:application showInTaskBar="no" APPLICATION="yes" ICON='msiexec.exe' SINGLEINSTANCE='yes' SysMenu="no" applicationname="ENCRYPTED" border="thick" contexmenu="no" scroll="no" selection="yes" singleinstance="yes" windowstate="normal" MAXIMIZEBUTTON="NO" BORDER="DIALOG" width="100" height="100" MINIMIZEBUTTON="NO"></hta:application>
5	+	<script language="JavaScript">
6	+	var authkey = '';
7	+	var email = '[email protected]';
8	+	var url = 'http://3x55o3u2b7cjs54eifja5m3ottxntlubhjzt6k6htp5nrocjmsxxh7ad.onion/';
9	+	var vid = '[snip]';
10	+	var cid = '[snip]';
11	+	var uniqueid;
12	+
13	+	function Start() {
14	+	window.resizeTo(658,500);
15	+
16	+	if (vid == '') {
17	+	uniqueid = cid;
18	+	} else {
19	+	uniqueid = vid;
20	+	}
21	+	}
22	+	function copytext(s) {
23	+	window.clipboardData.setData("Text", s);
24	+	alert('Auth Key copied to clipboard');
25	+	};
26	+	function openpage(url) {
27	+	window.clipboardData.setData("Text", url);
28	+	alert('URL copied to buffer. Open it in TOR Browser');
29	+	}
30	+	function help() {
31	+	window.clipboardData.setData("Text", uniqueid);
32	+	alert('If you have trouble with the main contacts, write to '+email+'. Your ID copied to buffer');
33	+	}
34	+	function document.onkeydown() {
35	+	var alt = window.event.altKey;
36	+	if (event.keyCode == 116 \|\| event.keyCode == 27 \|\| alt && event.keyCode == 115) {
37	+	event.keyCode = 0;
38	+	event.cancelBubble = true;
39	+	return false;
40	+	}
41	+	}
42	+	Start();
43	+	</script>
44	+
45	+	<body style="background: #ffffff; font: 12px 'Arial', sans-serif; padding: 0; margin: 0; overflow-x: hidden;" onload="Start();">
46	+	<textarea style="display: none" id="authkey">--START_OF_DATA--
47	+	[snip]
48	+	--END_OF_DATA--</textarea>
49	+	<div style="">
50	+	<div style="width: 100%; height: 100%; position: absolute; top: 0; left: 0; box-sizing: border-box; padding: 0px; overflow-x: hidden;overflow-y: hidden; background-color: #ffffff;">
51	+
52	+	<div style="background-color: #A0031D; box-sizing: border-box; width: 100%; padding: 14px 0;">
53	+	<div style="text-align: center; color: #ffffff; font-size: 25px; font-weight: 700; text-transform: uppercase;">the entire network is encrypted <br>your business is losing money</div>
54	+	</div>
55	+
56	+	<div style="background-color: #ffffff; width: 600px; padding: 20px; box-sizing: border-box;">
57	+	<div style="margin-right: 18px; float: left; width: 31%;">
58	+	<span style="float: left; font-weight: 700; color: #F80129; margin-right: 2px;">▲</span>
59	+	<div style="float: left; font-size: 12px; color: #000000; width: 170px;">All documents, databases, backups and other critical data were encrypted and leaked</div>
60	+	<div style="clear: both; float: none; height: 18px; width: 100%;"></div>
61	+	</div>
62	+
63	+	<div style="margin-right: 18px; float: left; width: 31%;">
64	+	<span style="float: left; font-weight: 700; color: #F80129; margin-right: 2px;">▲</span>
65	+	<div style="float: left; font-size: 12px; color: #000000; width: 170px;">The program uses a secure AES algorithm, which makes decryption impossible without contacting us</div>
66	+	<div style="clear: both; float: none; height: 18px; width: 100%;"></div>
67	+	</div>
68	+
69	+	<div style="float: left; width: 31%;">
70	+	<span style="float: left; font-weight: 700; color: #F80129; margin-right: 2px;">▲</span>
71	+	<div style="float: left; font-size: 12px; color: #000000; width: 160px;">If you refuse to negotiate, the data will be auctioned off</div>
72	+	<div style="clear: both; float: none; height: 18px; width: 100%;"></div>
73	+	</div>
74	+	<div style="clear: both; float: none; height: 0px; width: 100%;"></div>
75	+
76	+	<div style="border: 1px solid #e5e5e5; padding: 20px; box-sizing: border-box;">
77	+	<div style="font-size: 14px; font-weight: 700; color: #000000; text-align: center;">To recover your data, please follow the instructions</div>
78	+
79	+	<div style="margin-top: 10px;">
80	+	<div style="float: left; margin-right: 10px; margin-left: 10px; width: 31%;">
81	+	<div style="font-size: 40px; font-weight: bold; color: #e5e5e5; float: left; margin-right: 13px;">1</div>
82	+	<div style="float: left; margin-top: 5px;">
83	+	<div style="font-size: 12px; color: #5E5C5C; margin-bottom: 3px;">Download Tor Browser</div>
84	+	<a href="https://www.torproject.org/dist/torbrowser/11.5.7/torbrowser-install-win64-11.5.7_en-US.exe" style="font-size: 14px; font-weight: 700; color: #0C94E0; text-decoration: none;" target="_blank">Download</a>
85	+	</div>
86	+	<div style="clear: both; float: none;"></div>
87	+	</div>
88	+
89	+	<div style="float: left; margin-right: 10px; margin-left: 10px; width: 31%;">
90	+	<div style="font-size: 40px; font-weight: bold; color: #e5e5e5; float: left; margin-right: 13px;">2</div>
91	+	<div style="float: left; margin-top: 5px;">
92	+	<div style="font-size: 12px; color: #5E5C5C; margin-bottom: 3px;">Open decryption page</div>
93	+	<a href="#" style="font-size: 14px; font-weight: 700; color: #0C94E0; text-decoration: none;" target="_blank" onclick="openpage(url); return false;">Copy</a>
94	+	</div>
95	+	<div style="clear: both; float: none;"></div>
96	+	</div>
97	+
98	+	<div style="float: left; margin-right: 10px; margin-left: 10px; width: 31%;">
99	+	<div style="font-size: 40px; font-weight: bold; color: #e5e5e5; float: left; margin-right: 13px;">3</div>
100	+	<div style="float: left; margin-top: 5px;">
101	+	<div style="font-size: 12px; color: #5E5C5C; margin-bottom: 3px;">Auth using this key</div>
102	+	<a href="#" style="font-size: 14px; font-weight: 700; color: #0C94E0; text-decoration: none;" onclick="copytext(authkey); return false;">Copy</a>
103	+	</div>
104	+	<div style="clear: both; float: none;"></div>
105	+	</div>
106	+
107	+	<div style="clear: both; float: none;"></div>
108	+	</div>
109	+	</div>
110	+
111	+	<div style="margin-top: 18px; width: 100%;">
112	+	<div style="float: left; font-size: 12px; color: #5E5C5C;">The price depends on how soon you will contact us</div>
113	+	<a href="" style="float: right; font-size: 12px; color: #0C94E0; text-decoration: none;" onclick="help(); return false;">Need help?</a>
114	+	<div style="clear: both; float: none;"></div>
115	+	</div>
116	+	</div>
117	+
118	+	<div style="padding: 20px 30px; width: 600px; background-color: #f7f2f3; box-sizing: border-box;">
119	+	<div style="float: left; margin-right: 21px;">
120	+	<div style="float: left; font-size: 11px; color: #F80129; font-weight: 700; margin-right: 6px;">●</div>
121	+	<div style="float: left; width: 110px;">
122	+	<div style="font-size: 11px; font-weight: 700; color: #000000; margin-bottom: 2px; margin-top: 1px;">Don't doubt</div>
123	+	<div style="font-size: 11px; color: #5E5C5C;">You can decrypt 3 files for free as a guarantee</div>
124	+	</div>
125	+	</div>
126	+
127	+	<div style="float: left; margin-right: 27px;">
128	+	<div style="float: left; font-size: 11px; color: #F80129; font-weight: 700; margin-right: 6px;">●</div>
129	+	<div style="float: left; width: 103px;">
130	+	<div style="font-size: 11px; font-weight: 700; color: #000000; margin-bottom: 2px; margin-top: 1px;">Don't waste time</div>
131	+	<div style="font-size: 11px; color: #5E5C5C;">Decryption price increases every hour</div>
132	+	</div>
133	+	</div>
134	+
135	+	<div style="float: left; margin-right: 27px;">
136	+	<div style="float: left; font-size: 11px; color: #F80129; font-weight: 700; margin-right: 6px;">●</div>
137	+	<div style="float: left; width: 114px;">
138	+	<div style="font-size: 11px; font-weight: 700; color: #000000; margin-bottom: 2px; margin-top: 1px;">Don't contact resellers</div>
139	+	<div style="font-size: 11px; color: #5E5C5C;">They resell our services at a premium</div>
140	+	</div>
141	+	</div>
142	+
143	+	<div style="float: left;">
144	+	<div style="float: left; font-size: 11px; color: #F80129; font-weight: 700; margin-right: 6px;">●</div>
145	+	<div style="float: left; width: 108px;">
146	+	<div style="font-size: 11px; font-weight: 700; color: #000000; margin-bottom: 2px; margin-top: 1px;">Don't recover files</div>
147	+	<div style="font-size: 11px; color: #5E5C5C;">Additional recovery software will damage your data</div>
148	+	</div>
149	+	</div>
150	+
151	+	<div style="clear: both; float: none; height: 0px; width: 100%;"></div>
152	+	</div>
153	+	</div>
154	+	</div>
155	+	<script language="JavaScript">
156	+	authkey = document.getElementById('authkey').value;
157	+	</script>
158	+	</body>
159	+
160	+	</html>
161	+

add trigona ransom note