찾아줄게요

RAPID 파일은 무엇입니까?

• 안녕하세요. 제 컴퓨터에서 RAPID라는 파일을 찾았는데 이것이 무엇인지 잘 모르겠습니다. 알려주시면 감사하겠습니다.

• RAPID 파일은 Rapid 암호화 파일 입니다. Rapid에서 배포한 파일인 것으로 보입니다. 2018-02-06 03:15:48에 처음으로 보고되었으며 2018-02-06 03:15:48에 마지막으로 보고되었습니다.

• Rapid 프로그램을 다운로드하여 RAPID 파일을 열 수 있습니다.

• Rapid 랜섬웨어 암호화 파일
  
  Rapid ransomware encrypted file

• ! How Decrypt Files (TXT)
  
  [email protected]
  
  Hello!
  
  All your files have been encrypted by us
  
  If you want resotre files write on e-mail - [email protected]

• 연관 링크 #1: https://www.pcrisk.com/removal-guides/12098-rapid-ransomware

• 연관 링크 #2: https://www.youtube.com/watch?v=bWQ_jKrxDmE

• [2021-06-14 17:44:00] @phishunt_io #NewPhishing | #phishing #scam ???? /hotmailsec.weebly.com/css/404.php ???? 199.34.228.53 ☁ WEEBLY ???? RapidSSL RSA CA 2018 https://twitter.com/phishunt_io/status/1404389151915397124/photo/1

• [2021-06-07 14:44:38] @phishunt_io #NewPhishing | #phishing #scam ???? /facebook-fbz-video.weebly.com/ ???? 199.34.228.53 ☁ WEEBLY ???? RapidSSL RSA CA 2018 https://twitter.com/phishunt_io/status/1401807298125832194/photo/1

• [2021-04-05 21:33:13] @phishunt_io #NewPhishing | #phishing #scam ???? /itausenhacard.000webhostapp.com/ ???? 145.14.144.58 ☁ Hostinger International Limited ???? RapidSSL RSA CA 2018 https://twitter.com/phishunt_io/status/1379079684605030404/photo/1

• [2021-03-19 19:05:58] @phishunt_io #NewPhishing | #phishing #scam ???? /itaumllhas.000webhostapp.com/ ???? 145.14.144.129 ☁ Hostinger International Limited ???? RapidSSL RSA CA 2018 https://twitter.com/phishunt_io/status/1372866935747178499/photo/1

• [2021-03-17 08:30:50] @fbgwls245 #Rapid (Covid 19) #Ransomware BCD0CF45D8A8B16EFC9970D3C02B93E7 ext: ********.lock Note: !!!_FILES_RECOVERY.txt @BleepinComputer @demonslay335 @Amigo_A_ @siri_urz @malwrhunterteam https://twitter.com/fbgwls245/status/1371982321851662337/photo/1

• [2021-03-03 23:24:32] @phishunt_io #NewPhishing | #phishing #scam ???? /wn22concept.000webhostapp.com/login%20to%20facebook.html ???? 145.14.144.197 ☁ Hostinger International Limited ???? RapidSSL RSA CA 2018 https://twitter.com/phishunt_io/status/1367133799671291909/photo/1

• [2021-02-27 00:18:47] @phishunt_io #NewPhishing | #phishing #scam ???? /facbook-com-annisa.000webhostapp.com/ ???? 145.14.145.55 ☁ Hostinger International Limited ???? RapidSSL RSA CA 2018 https://twitter.com/phishunt_io/status/1365335513813647362/photo/1

• [2021-02-25 22:53:08] @phishunt_io #NewPhishing | #phishing #scam ???? /pemblokiran-fb2021.weebly.com/verifikasi-facebook-anda.html ???? 199.34.228.54 ☁ WEEBLY ???? RapidSSL RSA CA 2018 https://twitter.com/phishunt_io/status/1364951571721814021/photo/1

• [2021-02-22 11:17:05] @delet3forever atenção fãs da Karol vamos salvar nossa mamacita do paredão aqui tá um site que facilita o número de votos. vamos de #ForaArthur desativem o avast pra ele rodar mais rápido https://www.virustotal.com/gui/file/2e08851a1413fef9a16c5349e684eba7e029a7fb9d5275b37605a57972ddf909/detection

• [2021-02-11 04:47:38] @phishunt_io #NewPhishing | #phishing #scam ???? /dev.klinikmatanusantara.com/log-au/mpp/signin/bb9a/websrc ???? 117.54.5.10 ☁ INDO Internet. PT ???? RapidSSL RSA CA 2018 https://twitter.com/phishunt_io/status/1359604963937308674/photo/1

• [2021-02-02 14:40:51] @yvesago #phishing @WeTransfer s://wonderful-rapid-shade.glitch.me/#ping @malwrhunterteam @Spam404 @PhishStats https://twitter.com/yvesago/status/1356492761042665473/photo/1

• [2021-01-22 22:58:57] @dms1899 #emotet epoch2 is back on distro. DOC: hxxps://comotocarviolaorapido.com/unquality/kEX5pzsmEFr https://tria.ge/210122-pxgegkhlax

• [2021-01-14 01:53:56] @yvesago #phishing s://webmailcloud-ssotfu54e5jty.web.app/?emailtoken= Post to s://bremerrapidest.xyz/merrybe/post.php ping @malwrhunterteam @Spam404 @PhishStats https://twitter.com/yvesago/status/1349414390760669186/photo/1

• [2020-12-08 01:11:59] @neonprimetime live cred #phishing that swipes the domain icon webmailsso-85eurhd.web.app/?emailtoken= ???&domain= ??? subject: 12/7/2020 3:21:11 Returned mail: Email-bx Full Exceeded posts stolen creds to hxxps://bremerrapidest.xyz/merrybe/post.php https://app.any.run/tasks/def068ed-ac5d-45cf-ae31-0d978f3df122 https://twitter.com/neonprimetime/status/1335995482632581121/photo/1

• [2020-12-07 20:34:17] @phishunt_io #NewPhishing | #phishing #scam ???? /tteam-yahoo-com.weebly.com/ ???? 199.34.228.53 ☁ WEEBLY ???? RapidSSL RSA CA 2018 https://twitter.com/phishunt_io/status/1335925598733148163/photo/1

• [2020-11-27 16:31:32] @SkittlesSpace 2/2 hunter .io zorexeye .com pulsedive .com netograph .io vigilante .pw http://pipl.com abuse .ch maltiverse .com/search insecam .org spyse .com opendata .rapid7 .com

• [2020-10-28 18:59:54] @Cryptolaemus1 New #emotet Epoch 2 urls 1/2 //nanettecook.org/wp-admin/x/ //scalarmonitoring.com/wp-admin/js/widgets/S0A/ s://fourseasonsjsc.com/wp-admin/hzu9vvt/ s://ningyangseo.com/wp-admin/am/ s://www.rapidcarwash.net/wp-content/nO6U/ //coolchacult.com/wp-includes/i/

• [2020-07-26 22:44:41] @jjrruiz @StudioRetroFit conteúdo #fraudulento ( #phishing) no seu website: http://www-bancochile .cl.studioretrofit .com.br/ Provas: * http://virustotal.com/gui/domain/www-bancochile.cl.studioretrofit.com.br/detection … * http://www.virustotal.com/gui/url/04b9c109689ac39c5b09da5c0601a46adf4f5f3b02e16e6e4d02cdba3d66c1d1/detection … Por favor. remover o subdomain e tudo o conteúdo fraudulento o mais rápido possível. Obrigado

• [2020-07-22 21:06:20] @NtSetDefault Brazilian banking trojan http://enviocorreios.serveftp.org/zoom.php http://seusedexrapido.serveftp.org/gatw.php @anyrun_app https://app.any.run/tasks/599e1eb9-a1c9-4d80-b33d-281cd619cc6c … f00136cdb604c1d6bbf461c5be65194d pic.twitter.com/MTxXm2AVAF

• [2020-07-08 01:43:54] @javierpinac #VirusTotal free service from a web platform that allows analyzing suspicious files and URLs. facilitating the rapid detection of viruses. worms. Trojans and all kinds of malware. http://www.virustotal.com/ http://www.javierpina.com/virustotal-2/ pic.twitter.com/5WxeCE4dhs

• [2020-07-08 01:39:11] @javierpinac #VirusTotal servicio gratuito desde una plataforma web que permite analizar archivos y URLs sospechosas. facilitando la rápida detección de virus. gusanos. troyanos y todo tipo de malware. http://www.virustotal.com/ http://www.javierpina.com/virustotal-2/ pic.twitter.com/DOPHaeB0NM

• [2020-06-23 21:23:48] @ffforward One of the daily #TA505 URL's is s/d2.dropboxccdn.com/d/gsl37502gfgg/ Filename "324_The Peoples Pension (01-Oct-19 to 31-May-20) (Set 3).xls". might help finding mail lure. #Get2 C2 /rapid-stores.com as expected h/t @AdamTheAnalyst @stoerchl https://app.any.run/tasks/a8305838-925d-4f3c-b5a5-e61500f00739 …

• [2020-06-23 20:52:57] @stoerchl Download URL is: hxxps://d2.dropboxccdn.com/d/gsl37502gfgg/ C2 is indeed rapid-stores.com https://app.any.run/tasks/4022bccf-9f11-4260-a596-3576eae95ad5 …

• [2020-05-18 21:44:46] @IpNigh #Phishing | #PhishKit | #PhishingKit Found and downloaded. URL:hxxps://entregamaisrapidadobrasil.com/as-melhores-ofertas/PROMOCAO/PRODUTO956c529fba220105998b27c512b18b37MRBT/Identificacao/ Threat Actor Emails are attached below. Bot Generated pic.twitter.com/QWWeoOvbOE

• [2020-04-28 22:54:39] @JaromirHorejsi Research Paper on Obese Cats payload generated with Rex powershell https://github.com/rapid7/rex-powershell … https://www.virustotal.com/gui/file/3ac631312f000645ad600041fefb07db1581ba6dfd89769fe7ec7ce275b666b5/detection … pic.twitter.com/WQVc7XUmO4

• [2020-04-06 01:42:42] @NtSetDefault Powershell payload found https://pastebin.com/SeTWU3Yf using reverse ssh tunnel to targets https://sshreach.me/ Source: https://github.com/rapid7/metasploit-framework/blob/master/data/exploits/powershell/powerfun.ps1 … VT: https://www.virustotal.com/gui/url-analysis/u-77b2296159141609d1f1ea11744c51f380d30589b913fc1a7c29e704b717ad11-1586104760/detection … "#Powerfun - Written by Ben Turner & Dave Hardy" pic.twitter.com/FVfNTKnMki

• [2020-02-26 01:46:05] @wwp96 #nanocore @JAMESWT_MHT hxxp://185.112.250.168/tasksmgr.exe /34112r.rapiddns.ru 728475a839b61357c424d276afb8ae19 - tasksmgr.exe 6cbdff615fbf46cec1aac3ac271ae9c2 - doc https://app.any.run/tasks/3b5337f4-736a-4625-94d7-5810c2719f28 …

• [2020-02-26 00:27:24] @wwp96 Is this #Gh0st @lazyactivist192 @JAMESWT_MHT C2 referenced here: https://otx.alienvault.com/pulse/5e526a70e6dc03c41340eceb … hxxp://185.112.250.168/svchosts.exe /425rt.rapiddns.ru 8d986df396c828930e8dc84765cdd184 - svchosts.exe 509125d5bee63c67e46ce84515736a2a - doc https://app.any.run/tasks/64b20f25-25a3-47f1-a4c2-7f1def9f010b …

• [2020-02-17 22:02:25] @reecdeep #malware #opendir #trojan #formbook #stealer DOCX > RTF > XLS > PS > VBS https://app.any.run/tasks/c9bb2639-adbe-40b9-b066-8e39cf1f1522 … hxxp://joeing.rapiddns.ru/1/ @VK_Intel @JAMESWT_MHT @malwrhunterteam @matte_lodi @merlos1977 @sugimu_sec @Bl4ng3l #DFIR #infosec #cybersecurity #ThreatIntel #threathunting pic.twitter.com/4jdvi5qH9r

• [2020-01-24 01:21:40] @James_inthe_box One of the oddest #formbook installs I've seen: https://app.any.run/tasks/e26f7e65-482e-40fe-8423-38c1ba03b09d … link that's not seen is: http://joeing.rapiddns.ru/a/Attack.jpg cc @fumik0_ @cocaman @hexlax pic.twitter.com/taGQCe5cFU

• 보이스피싱, 불법촬영물, 랜섬웨어, 사이버 안보위협 등에 관련된 사안의 경우 다음과 같은 기관 및 단체의 도움을 받을 수 있습니다. 노모어랜섬(No More Ransom) 경찰청 사이버범죄 신고시스템 국가정보원 민원센터