Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Latest News: Microsoft just killed the Windows 10 Beta Channel again

Featured Deal: Study ethical hacking in this comprehensive $40 course bundle deal

Latest Buyer's Guide: PureVPN review: How good is it in 2024?

Proton/Shinra Ransomware (.[email].[random 4-10 char]) Support Topic

Started by pete0980 , Feb 02 2024 07:42 AM

«
Prev

Please log in to reply

48 replies to this topic

#46 degiroll23

Members
2 posts
OFFLINE

Local time:08:16 PM

Posted 30 October 2024 - 03:56 AM

Hi,

We were hit by this unknown ransomware. i have tried to run the ransom note and encrypted file but it's unable to determine the ransomware (reference SHA1: db2cdb1bd6f9356abb6ab02ee4ff59ff110b5bdd). the encrypted file extension is .IZ2

here i attach the ransom note, but i somehow i'm not permitted to upload the encrypted file here. Thank you to anyone that can tell us more!

Attached Files

#HowToRecover.txt 464bytes 5 downloads

Back to top

BC AdBot (Login to Remove)

BleepingComputer.com
Register to remove ads

#47 degiroll23

Members
2 posts
OFFLINE

Local time:08:16 PM

Posted 30 October 2024 - 04:03 AM

here is the link to encrypted file https://drive.google.com/file/d/1wPyhXKDDdwpVWxDEa9c5RLfdRal7dc1B/view?usp=sharing

Back to top

#48 rivitna

Security Colleague
411 posts
ONLINE

Gender:Male
Local time:04:16 PM

Posted 30 October 2024 - 04:24 AM

It's Proton / Shinra ransomware

Back to top

#49 quietman7

Bleepin' Gumshoe

Global Moderator
62,740 posts
OFFLINE

Gender:Male
Location:Virginia, USA
Local time:08:16 AM

Posted 30 October 2024 - 06:42 AM

@degiroll23

I have merged your topic into the primary support topic for victims of this ransomware.

.
.
Microsoft MVP Alumni 2023, Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023

Microsoft MVP Consumer Security 2007-2015
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief

If I have been helpful & you'd like to consider a donation, click