JAFF Ransomware

Forum for analysis and discussion about malware.
Post Reply
User avatar
maddog4012
Posts: 63
Joined: Mon Aug 04, 2014 6:53 pm

JAFF Ransomware

Post by maddog4012 » Fri May 12, 2017 6:31 pm

You do not have the required permissions to view the files attached to this post.

User avatar
xors
Posts: 145
Joined: Mon May 23, 2016 2:01 am

Re: JAFF Ransomware

Post by xors » Wed May 17, 2017 7:07 pm

Another one. It contains an interesting pdb path. "D:\Arena\Cryptor_AES-RSA_V13\Release\Encoder.pdb"

The configuration of the ransomware is stored in the resources.
You do not have the required permissions to view the files attached to this post.
@xorsthingsv2

Post Reply