찾아줄게요

OSIRIS 파일은 무엇입니까?

• 안녕하세요. 제 컴퓨터에서 OSIRIS라는 파일을 찾았는데 이것이 무엇인지 잘 모르겠습니다. 알려주시면 감사하겠습니다.

• OSIRIS 파일은 Locky 암호화 파일 입니다. Locky에서 배포한 파일인 것으로 보입니다. 2017-10-18 21:16:23에 처음으로 보고되었으며 2017-10-18 21:16:23에 마지막으로 보고되었습니다.

• Locky 프로그램을 다운로드하여 OSIRIS 파일을 열 수 있습니다.

• Locky 랜섬웨어 암호화 파일

• _[0-9]_HELP_instructions (BMP, HTML, TXT)
  
  _[0-9]-INSTRUCTION (HTML)
  
  _[0-9]_WHAT_is (BMP, HTML)
  
  -INSTRUCTION (BMP, HTML)
  
  _HELP_instructions (BMP, HTML, TXT)
  
  _HOWDO_text (BMP, HTML)
  
  _Locky_recover

• 연관 링크 #1: 첨부된 링크가 없습니다.

• 연관 링크 #2: 첨부된 링크가 없습니다.

• [2021-03-17 03:39:43] @dor0n1 https://bazaar.abuse.ch/sample/3002d2fc90595dd4688518b300323aaf26d4ae09cb33b2b580cbec41b43d8eb6/ calls tor relays. Still 0 on VT. .net tor modul that drops last stage like #kronos #osiris and CS.

• [2021-03-10 18:24:22] @benkow_ Osiris. Mexican injects Cnc: http://trqtfidgqmcmqytw. onion/kpanel Uadmin for the injects: https://dlxfreight. bid/uadmin/adm.php https://www.virustotal.com/gui/file/4807f8fce08612cc316476fe34aa497188810fc10102c6c07bf18142655eb252/relations https://twitter.com/benkow_/status/1369594973524553730/photo/1

• [2020-11-03 21:55:41] @nazywam A alive #kronos/#osiris sample https://bazaar.abuse.ch/sample/111b63f31d1e6855b0bc722107ac4f5668a7f115fd45654625eb41a6160828c6/ ???? c2: http://o3qrynq3djknfebz.onion/kpanel/connect.php (first time seeing this one) No injects returned but it looks to be up and running

• [2020-11-03 17:04:06] @JAMESWT_MHT #Osiris #signed "Unicom Ltd" Sample https://bazaar.abuse.ch/sample/bf9eb06db25ea1d3138b8e19a18d248df56a04200f9e54edfed850d018d2bb62/ Source url https://urlhaus.abuse.ch/url/782181/ H/T @malwrhunterteam cc @Arkbird_SOLG @Jan0fficial @sugimu_sec @verovaleros @James_inthe_box @VK_Intel https://twitter.com/JAMESWT_MHT/status/1323551515890638852/photo/1

• [2020-10-28 17:44:27] @500mk500 @malwrhunterteam @demonslay335 This is #kronos / #osirisnetwork trail: https://www.virustotal.com/gui/file/a188e147ba147455ce5e3a6eb8ac1a46bdd58588de7af53d4ad542c6986491f4/behavior https://twitter.com/500mk500/status/1321387341529915392/photo/1

• [2020-10-23 17:32:02] @JAMESWT_MHT Collection of "FAT11 d.o.o." signed samples https://bazaar.abuse.ch/browse/tag/FAT11%20d.o.o./ > Flag as #Kronos by @IntezerLabs https://analyze.intezer.com/analyses/64a2e232-8089-4686-8628-0e8da53ec52c/sub/e1f75bda-2b80-450b-9ef9-0b127e4488b3 > https://analyze.intezer.com/analyses/a1db994b-0650-464f-b7de-9e86edaf33dd >#Osiris https://bazaar.abuse.ch/sample/62bd38c89d1a30b03bd89a788d9f2852659f77715c97e5c12445c33f43fa13e5/ https://analyze.intezer.com/analyses/ad0da168-d493-4ce4-8489-f7e35092e4ff cc @Arkbird_SOLG @VK_Intel @Jan0fficial @James_inthe_box @sugimu_sec https://twitter.com/malwrhunterteam/status/1319261771195187200 https://twitter.com/JAMESWT_MHT/status/1319587377606758400/photo/1

• 보이스피싱, 불법촬영물, 랜섬웨어, 사이버 안보위협 등에 관련된 사안의 경우 다음과 같은 기관 및 단체의 도움을 받을 수 있습니다. 노모어랜섬(No More Ransom) 경찰청 사이버범죄 신고시스템 국가정보원 민원센터