Monday, 7 March 2011

Pornoplayer ransomware updated: Mystic Compressor


Another update regarding the pornoplayer ransomware.
Samples of yesterday and today seem unknown for most of AV according to VirusTotal (Result of the dropper) ~ Result of the ransom dropped



Nothing have really changed until the twice packer.
The dropper and the ransomware dropped are now packed with Mystic Compressor.
A compressor know for pack rogues and Zbot.

Dropper:

Dropped ransomware:

Code to unlock:

No comments:

Post a comment