内容仅以原始语言提供
class="post-article">
Ransomware Delphi 自2024年起活跃

LANRansomware

Tanimlanmamis Delphi tabanli LAN ransomware. AES-ECB ve AES-CTR modu sifrelemesi, yerel ag paylasimlari tarama ve sifreleme kapasitesi. /stealth, /wipeonly komut satiri secenekleri. how_to_decrypt.txt fidye notu. 11-section PE32+ TLS.

威胁档案
类型 Ransomware
编程语言Delphi
C2协议TCP/HTTPS
首次发现2024
目标 Küresel
用途 / 能力
  • File Encryption/Ransomware

C2服务器 1

地址 端口 协议 状态 操作
tmonitor.pw
443 HTTPS INACTIVE

⚠ C2 地址仅用于威胁情报和防御目的。未经授权访问这些地址属于违法行为。

研究报告 (2)

Yüksek

LANRansomware 48877a3a -- Delphi folder-reserved-by-lan-encryptor AES-ECB-CTR dot-encrypted-extension how-to-decrypt-txt stealth-mode wipeonly-flag WSAStartup-network-scan 11-sections-TLS | Yuksek

LANRansomware 48877a3a Delphi PE32+ x64 535KB 11-section TLS. LAN network encryptor. AES-ECB+CTR. .-encrypted uzantisi. how_to_decrypt.txt. /stealth /wipeonly modlari. WSAStartup ag tarama.

阅读报告 →
Kritik

LANRansomware 48877a3a -- folder_reserved_by_lan_encryptor LAN Ag Sifreleme, EncryptECB DecryptECB AES ECB Modu, is_stealth cmd_list Gizli Mod Bayraklari, wipeonly Silme Modu, TMonitor.PW C2 Domain | Kritik

LANRansomware 48877a3a PE32+ x64 535KB Delphi. folder_reserved_by_lan_encryptor LAN sifreleme. EncryptECB DecryptECB AES ECB. is_stealth cmd_list gizli mod. wipeonly silme modu. TMonitor.PW C2.

阅读报告 →