TT Malware Log

マルウェア / サイバー攻撃 / 解析技術 に関する「個人」の調査・研究・参照ログ

Threat spotlight: RobbinHood ransomware takes the driver’s seat

【図表】

f:id:tanigawa:20220402121124p:plain
“It’s impossible to recover your files without private key and our unlocking software. You can google: Baltimore City, Greenville city and RobbinHood ransomware.”
出典: https://blog.malwarebytes.com/threat-spotlight/2020/02/threat-spotlight-robbinhood-ransomware-takes-the-drivers-seat/


【ブログ】

◆Threat spotlight: RobbinHood ransomware takes the driver’s seat (Malwarebytes, 2020/02/20)
[脅威のスポットライト: RobbinHood ランサムウェアが運転席に座る]
https://blog.malwarebytes.com/threat-spotlight/2020/02/threat-spotlight-robbinhood-ransomware-takes-the-drivers-seat/


【インディケータ情報】

■ハッシュ情報(Sha256) - RobbinHood -

791c32a95f401f7464214960e49e716656f6fd6fff135ac2a6ba607236d3346e
99c3cc348f8ee4e87bce45b1dd185d31830c370ac43fd3e39ac50340f029ef79
e9188ace227b00cbf1f6fba3ceb32af8e4d456c3a0815300a224a9d9e00778a8
47d892da6a49b02a2904bdc0d03ecef66c076481d19ab19251d86d11be494765

(以上は Malwarebytes の情報: 引用元は https://blog.malwarebytes.com/threat-spotlight/2020/02/threat-spotlight-robbinhood-ransomware-takes-the-drivers-seat/)


■ランサムノート

_Decrypt_Files.html
_Decryption_ReadMe.html
_Help_Help_Help.html
_Help_Important.html

■拡張子

.enc_robbinhood


【検索】

google: 791c32a95f401f7464214960e49e716656f6fd6fff135ac2a6ba607236d3346e
google: 99c3cc348f8ee4e87bce45b1dd185d31830c370ac43fd3e39ac50340f029ef79
google: e9188ace227b00cbf1f6fba3ceb32af8e4d456c3a0815300a224a9d9e00778a8
google: 47d892da6a49b02a2904bdc0d03ecef66c076481d19ab19251d86d11be494765

google: _Decryption_ReadMe.html
google: _Help_Help_Help.html
google: _Help_Important.html

google: .enc_robbinhood


google: site:virustotal.com 791c32a95f401f7464214960e49e716656f6fd6fff135ac2a6ba607236d3346e
google: site:virustotal.com 99c3cc348f8ee4e87bce45b1dd185d31830c370ac43fd3e39ac50340f029ef79
google: site:virustotal.com e9188ace227b00cbf1f6fba3ceb32af8e4d456c3a0815300a224a9d9e00778a8
google: site:virustotal.com 47d892da6a49b02a2904bdc0d03ecef66c076481d19ab19251d86d11be494765

google: site:virustotal.com _Decryption_ReadMe.html
google: site:virustotal.com _Help_Help_Help.html
google: site:virustotal.com _Help_Important.html

.google: site:virustotal.com enc_robbinhood


【VT検索】

https://www.virustotal.com/gui/file/791c32a95f401f7464214960e49e716656f6fd6fff135ac2a6ba607236d3346e
https://www.virustotal.com/gui/file/99c3cc348f8ee4e87bce45b1dd185d31830c370ac43fd3e39ac50340f029ef79
https://www.virustotal.com/gui/file/e9188ace227b00cbf1f6fba3ceb32af8e4d456c3a0815300a224a9d9e00778a8
https://www.virustotal.com/gui/file/47d892da6a49b02a2904bdc0d03ecef66c076481d19ab19251d86d11be494765


Copyright (C) 谷川哲司 (Tetsuji Tanigawa) 1997 - 2022