so we got user and pass from database i found there was an
script enabled for download and execute a file see at pic3
Virustotatl update.src .. this is a cryptlocker
also the desktop after it execution
So it give's an email address and says that conntact him and send him an sum from 100$ then we get our files back ,
so i wrote him an email just for fun and after some conversation i told him i dont know what bitcoin is im just a stupid
user that lost his data and just want my data back, he responded like this
also an identity of a person , not sure if he is or like he said just a drop but he also send me other name's
I almost got him lol see following picture ..
and ye this was hist last message , PS lulz at his english
Bro you seriousl or you malware reserceher?
i give you valid details
My name is Ivan Fedorov
i am in Latvia
You sure you wont myhelp
i am sent you N7 msg
any who REALY need data computer ASK N1 GET BITCOIN
MAKE IN 48 HOURZ
I UZE ZEUS BOTNETZ
ANTI CORUPTIONZ ANTI ILLUMINATI SYSEM
HOW YOU R MOMA DIE SLOW IN HOSPITAL
YOU BE SOME 1 GUY RUS HOW YOU ПИДАРАЗ
MAKE PAUZE YOUR SELF!
ты вставляешь пралки в калеса я рублюза за норм и не трогаю руских
ты тебя мама кормит она скора умрет и будет повышенпие оплат за квартиры и за еду и комунальных услуг и тд
короче нахуй ты мне тут мозг ееш и на тебя размениваться
ЧТОБ ТВОЯ МАМА УМЕРЛА
YOUR MOM EAT MY EXE
DON KILUMINATI 7 DAY THEORY
