Hi,
Here is the ID ransomware reference: SHA1: 7407fa103aca6e9701754b97bfe113802fd5b32b
And also note from Hackers:
———————————–
YOUR COMPANY NETWORK HAS BEEN PENETRATED
All your important files have been encrypted!
Your files are safe! Only modified.
ANY ATTEMPT TO RESTORE YOUR FILES WITH THIRD-PARTY SOFTWARE
WILL PERMANENTLY CORRUPT IT.
DO NOT MODIFY ENCRYPTED FILES.
DO NOT RENAME ENCRYPTED FILES.
No software available on internet can help you. We are the only ones able to
solve your problem.
We gathered highly confidential/personal data. These data are currently stored on
a private server. This server will be immediately destroyed after your payment.
If you decide to not pay, we will release your data to public or re-seller.
So you can expect your data to be publicly available in the near future.
In case of reporting this to law enforcement you need to be ready that they will
confiscate most of your IT infrastructure, and even if you later change your
mind and decide to pay they will not let you.
———————————–
Frequently Asked Questions:
Q: How to decrypt?
A: You need to buy decryption software.
Q: Do you have any proofs that you are able to decrypt my files?
A: You can send up to 3 non-important files for decryption, free of charge.
Q: How much does decryption software cost?
A: $10000 (United States Dollars)
Q: How to buy decryption software?
A: You need to send equivalent XMR to this wallet: 84wBcPK6dV8BDezLCbnqkz2hTQHx9hdnNcMxL26mjCBKBQSEoMWkQFTGTa5v9rubnLdkRLZP5PodAYDVtzj5ynonVAB6FeM
Q: What is “XMR”?
A: https://www.getmonero.org/
Q: Where can I buy XMR (Monero)?
A: https://www.getmonero.org/community/merchants/
Q: How to contact with you?
A: Send $100 in XMR to the wallet above. It would be a signal to check email. WE DON’T CHECK EMAIL BEFORE INITIAL $100 PAYMENT.
Q: I’ve sent you $100, what’s next?
A: Send that
“84wBcPK6dV8BDezLCbnqkz2hTQHx9hdnNcMxL26mjCBKBQSEoMWkQFTGTa5v9rubnLdkRLZP5PodAYDVtzj5ynonVAB6FeM:Z3R4nQPRassQpFOjWPzFbInbA+R1G47lsMwjfiRUosfTveMDHxPbH9j3MrPdA989KFiCJgOfaofrI30UD7/WPYJolhoP+5jVQoPHorh3M9i2JrkEFObDwyuwORQfsOEKkKmWLoCXNUD5g0uYWaLljF8riAV06BDC8tTzIq/s9XG97aV/xg==”
identification string to that irvesely17@onionmail.org email (Reserve email: ), you can also attach few files for proof of decryption, and wait answer for 24 hours.
[!] This offer have limited time and expires at 23 04(April) 2022
Would be grtaeful if you guys could help me to deceypt the files. If you need further information please do not hesitate to ask me. Thanks
