찾아줄게요

CRYPT 파일은 무엇입니까?

• 안녕하세요. 제 컴퓨터에서 CRYPT라는 파일을 찾았는데 이것이 무엇인지 잘 모르겠습니다. 알려주시면 감사하겠습니다.

• CRYPT 파일은 CryptXXX 암호화 파일 입니다. CryptXXX에서 배포한 파일인 것으로 보입니다. 2017-10-19 00:24:02에 처음으로 보고되었으며 2017-10-19 00:24:02에 마지막으로 보고되었습니다.

• CryptXXX 프로그램을 다운로드하여 CRYPT 파일을 열 수 있습니다.

• CryptXXX 랜섬웨어 암호화 파일
  
  CryptXXX ransomware encrypted file

• de_crypt_readme (BMP, HTML, TXT)
  
  README (BMP, HTML, TXT)
  
  ![a-zA-Z0-9] (BMP, HTML, TXT)
  
  !README (BMP, HTML, TXT)
  
  !Recovery_[a-zA-Z0-9] (BMP, HTML, TXT)
  
  @[a-zA-Z0-9] (BMP, HTML, TXT)
  
  [a-zA-Z0-9] (

• 연관 링크 #1: 첨부된 링크가 없습니다.

• 연관 링크 #2: 첨부된 링크가 없습니다.

• [2021-07-06 16:17:49] @aaqeel87 @58_158_177_102 @BushidoToken @SyscallE @stoerchl @ffforward @abuse_ch @bry_campbell @dms1899 @Cryptolaemus1 Thanks for sharing! maldoc #ursnif url: https://welcombiz.com https://twitter.com/aaqeel87/status/1412339994358915073/photo/1

• [2021-07-06 06:17:36] @pollo290987 #Nitro #Ransomware Win32bit.exe 5a615891fcc57b57e9deffce6f559947 EXT: .givemenitro \AppData\Local\Temp\NR_decrypt.txt

• [2021-07-04 13:36:29] @dubstard ????@Uniswap @stable_uni ⚠ /app-uniswap.org-claims­.site ☣ AS13335 172.67.156.77 ???????? ???? @Namecheap ???? @cloudflare ???? @SectigoHQ cc @CryptoPhishing @CryptoScamDB @B0R444 @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 #phishing https://twitter.com/dubstard/status/1411574619870466048/photo/1

• [2021-07-04 12:20:18] @dubstard ???? @WalletConnect ⚠ /wallectconnectdapp­.org ☣ AS22612 199.188.201.106 ???????? ???? @Namecheap ???? @Namecheap ???? @SectigoHQ @ActorExpose @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 #phishing #scam https://twitter.com/dubstard/status/1411555444653498371/photo/1

• [2021-07-04 12:10:28] @dubstard ????@WalletConnect ⚠ /walletconnectslink­.org ☣ AS22612 162.0.229.158 ???????? ???? @netearthone ???? @Namecheap ????@SectigoHQ @ActorExpose @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 #phishing #scam https://twitter.com/dubstard/status/1411552973378002946/photo/1

• [2021-07-03 00:31:34] @InQuest Looking at a low detection (4/60) @Apple Store .xlsb sheet pushing #Dridex https://labs.inquest.net/dfi/hash/81f03743b4e979719ab9ce9e0426e943186bc7906e00e7a16faa2a4746b52990 @James_inthe_box @dmoore21 @jcarndt @Cryptolaemus1 https://twitter.com/InQuest/status/1411014701555847171/photo/1

• [2021-07-02 14:31:46] @dubstard ????@PancakeSwap ⚠ /exchange­.pancakeswap-finance-v2­.site ☣ AS20068 198.252.98.70 ???????? ???? @HawkHost ???? @Namecheap ????@SectigoHQ @ActorExpose @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 https://twitter.com/dubstard/status/1410863756167585796/photo/1

• [2021-07-01 19:49:28] @ffforward 13.82.24.228 on @Azure has been used as #WarzoneRAT #AveMaria C2 for at least 12 days. Latest one from encrypted 7z > https://bazaar.abuse.ch/sample/8a1ceb6687babe6ab82a38ca344d1092a7fc9bd6dbaf3420a3311c50131928ef/ https://tria.ge/210701-nsawm3mcgn https://twitter.com/MBThreatIntel/status/1408064073963429900 https://twitter.com/ffforward/status/1410581320812556290/photo/1

• [2021-07-01 17:08:35] @pollo290987 #dropper #redline #fickerstealer #cryptbot Data.exe ce7931866cf54b812ea1b2f40720eb41 redline: /qitoshalan.xyz:80 redline: /185.215.113.17:18597 fickerstealer: /game2030.site:80 cryptbot: /lopcpd05.top/download.php?file= lv.exe

• [2021-07-01 15:45:02] @dubstard ????@Polkadot ⚠ /walletsprotocol­.com ☣ AS22612 104.219.248.91 ???????? ???? @Namecheap ???? Namecheap ????@SectigoHQ @ActorExpose @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 #phishing #scam https://twitter.com/dubstard/status/1410519807485689858/photo/1

• [2021-06-30 04:25:14] @bry_campbell REvil “decrypter” https://www.virustotal.com/gui/file/587374c9af4b1ca05426ca4bc9ac3de42547288225009ba429661d84adb1c53c/detection https://twitter.com/bry_campbell/status/1409986339987247107/photo/1

• [2021-06-29 22:47:22] @GossiTheDog It’s about a year old but if it helps research - https://www.virustotal.com/gui/file/f972e4c87614e56523b4a90b2735f556725fdd05386542c134223a773968fc94/detection https://twitter.com/cryptoinsane/status/1408205222669848581

• [2021-06-29 17:59:10] @bry_campbell @aaqeel87 @58_158_177_102 @BushidoToken @SyscallE @stoerchl @ffforward @abuse_ch @dms1899 @Cryptolaemus1 Yes. is Ursnif. https://www.virustotal.com/gui/file/5831ebc72dc810c036fa0c1dc85e17490ebfe2f7379b9573f99d47817b9eb42c/community

• [2021-06-29 16:38:26] @aaqeel87 @58_158_177_102 @BushidoToken @SyscallE @stoerchl @ffforward @abuse_ch @bry_campbell @dms1899 @Cryptolaemus1 #ursnif probably this is the right URI: https://conltyng.com https://twitter.com/aaqeel87/status/1409808466701651977/photo/1

• [2021-06-29 11:45:53] @dubstard ????@Uniswap ⚠ /app-uniswap.org-exchange-swap-liquidity­.site ☣ AS20068 198.252.98.64 ???????? ???? @Namecheap ???? @HawkHost @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 #phishing #scam #ecrime #cybercrime https://twitter.com/dubstard/status/1409734845509652484/photo/1

• [2021-06-29 11:25:50] @dubstard ????@Uniswap ⚠ /app-uniswap.org-liquidity-exchange-swap­.site ☣ AS13335 172.67.130.40 ???????? ????@Namecheap ???? @cloudflare ????CloudflareSSL @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 #phishing #scam https://twitter.com/dubstard/status/1409729800458190848/photo/1

• [2021-06-29 11:19:20] @dubstard ????@Uniswap ⚠ /app-uniswap.org-liquidity-swap-exchange­.site ☣ AS13335 172.67.189.33 ???????? ????@Namecheap ???? @cloudflare ????@SectigoHQ @ActorExpose @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 #phishing https://twitter.com/dubstard/status/1409728162829934594/photo/1

• [2021-06-29 02:21:42] @dubstard ????@Uniswap ⚠ /app-uniswap.org-swap-liquidity­.site ☣ AS13335 172.67.217.210 ???????? ???? @Namecheap ???? @cloudflare ????@SectigoHQ @ActorExpose @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 #phishing https://twitter.com/dubstard/status/1409592863311204354/photo/1

• [2021-06-28 20:07:26] @dubstard ????@Uniswap ⚠ /ht-mdexcom.swap-liquidity­.site ☣ AS13335 172.67.152.65 ???????? ????@Namecheap ???? cloudflare ????@SectigoHQ @ActorExpose @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 #phishing https://twitter.com/dubstard/status/1409498675873828864/photo/1

• [2021-06-28 20:03:12] @dubstard ????@TrustWalletApp ⚠ /trustwalletapp­.me ☣ AS22612 68.65.122.160 ???????? ???? @Namecheap ???? Namecheap ????@SectigoHQ h/t @malwrhunterteam @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 #phishing #scam https://twitter.com/dubstard/status/1409497610638053379/photo/1

• [2021-06-28 17:45:02] @HeliosCert @HeliosCert Sample analysed on #virustotal VirusTotal-Score: 45 VirusTotal: https://www.virustotal.com/gui/file/b65a61d71b8f8a20aaf335c20a8e4a75a9184c21b08a240eae1b436df42a79c5/detection/f-b65a61d71b8f8a20aaf335c20a8e4a75a9184c21b08a240eae1b436df42a79c5-1624281918 Threat: http://WannaCry.Ransom.Encrypt.DDS (Malwarebytes)

• [2021-06-28 15:22:33] @pollo290987 #Coinminer #Stratum #CryptoNight BlackKing.exe f14166e86503be1ec472ce387436c811

• [2021-06-28 10:59:56] @dubstard ???? @Uniswap ⚠ /uniswap.org-swap-pool­.site ☣ AS13335 104.21.96.109 ???????? ????@Namecheap ???? @cloudflare ➡ Namecheap ????CloudflareSSL @ActorExpose @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 #phishing https://twitter.com/dubstard/status/1409360895516491782/photo/1

• [2021-06-28 03:00:54] @ffforward (Thread) Very well executed unidentified campaign from friday. ????#covid19 #vaccine malspam from /cov19inf.com on @bacloud. with SPF and DKIM. Attached encrypted xlsm with unique(?) password with macro on close that drops 6KB dll loader that downloads 7MB EXE. C2 /usergtarca.com https://twitter.com/ffforward/status/1409240342533181442/photo/1

• [2021-06-27 18:51:24] @GossiTheDog Ransomware leak time - Babuk's builder. Used for making Babuk payloads and decryption. builder.exe foldername. e.g. builder.exe victim will spit out payloads for: Windows. VMware ESXi.network attached storage x86 and ARM. note.txt must contain ransom. https://www.virustotal.com/gui/file/82e560a078cd7bb4472d5af832a04c4bc8f1001bac97b1574efe9863d3f66550/detection https://twitter.com/GossiTheDog/status/1409117153182224386/photo/1

• [2021-06-25 12:14:58] @dubstard ????@WalletConnect ⚠ /wallets-reauthorization­.com ☣ AS22612 192.64.117.217 ???????? ???? @Namecheap ????Namecheap ????@SectigoHQ h/t @bunnymaid @ActorExpose @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 https://twitter.com/dubstard/status/1408292612486975489/photo/1

• [2021-06-25 11:52:28] @dubstard ????@WalletConnect ⚠ /walletsecureonline­.org ☣ AS16509 18.192.76.182 ???????? ???? @Namecheap ???? Amazon ????@SectigoHQ h/t @bunnymaid @ActorExpose @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 #phishing https://twitter.com/dubstard/status/1408286950403067908/photo/1

• [2021-06-25 11:36:40] @dubstard ????@Polkadot ⚠ /walletauthentication­.org ☣ AS14061 167.99.246.105 ???????? ???? @Namecheap ????DigitalOcean ????@SectigoHQ h/t @bunnymaid @ActorExpose @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 #Scam https://twitter.com/dubstard/status/1408282975377276928/photo/1

• [2021-06-25 10:59:04] @dubstard ???? @WalletConnect ⚠ /walletsecureonline­.com ☣ AS14061 161.35.218.98 ???????? ???? @Namecheap ???? DigitalOcean ????@SectigoHQ h/t @1inchNetwork @ActorExpose @CryptoPhishing @CryptoScamDB @JAMESWT_MHT @JCyberSec_ @PhishFort @phishunt_io @sniko_ @tehnlulz @nullcookies @Spam404 https://twitter.com/dubstard/status/1408273513711124485/photo/1

• [2021-06-24 03:10:40] @pollo290987 #CryptBot #stealer 7ZSfxMod_x86.exe 99ac7062125f6982d0dcb5b9ff3fc3cd /mordiu01.top/index.php

• 보이스피싱, 불법촬영물, 랜섬웨어, 사이버 안보위협 등에 관련된 사안의 경우 다음과 같은 기관 및 단체의 도움을 받을 수 있습니다. 노모어랜섬(No More Ransom) 경찰청 사이버범죄 신고시스템 국가정보원 민원센터