Monday 7 March 2011

Pornoplayer ransomware updated: Mystic Compressor

Another update regarding the pornoplayer ransomware.
Samples of yesterday and today seem unknown for most of AV according to VirusTotal (Result of the dropper) ~ Result of the ransom dropped

Nothing have really changed until the twice packer.
The dropper and the ransomware dropped are now packed with Mystic Compressor.
A compressor know for pack rogues and Zbot.


Dropped ransomware:

Code to unlock:

No comments:

Post a Comment