Ransomware Analysis: 8 - Mole

"Mole" (CryptoMix variant) ransomware analysis. Hope you enjoy, follow me on Twitter @ https://twitter.com/_CryptoCat 🙂 MD5: 0ae91dbea7eff4b045b42920035a7a93 SHA256: 83da991097956362e2cb59cdfae6ffdb74388bf2 VT: https://www.virustotal.com/en/file/c6c1997191f67865a45e0cb5690a3213b177027df69a2c7c1f585807e890a296/analysis/ ------------------------------------------------------- References ------------------------------------------------------- Mole ransomware: analysis and decryptor https://www.cert.pl/en/news/single/mole-ransomware-analysis-and-decryptor/ Healthcare CERT warns about ‘Mole’ ransomware – what you need to know https://nakedsecurity.sophos.com/2017/04/25/healthcare-cert-warns-about-mole-ransomware-what-you-need-to-know/ New Ransomware variant Mole campaign using fake word documents https://www.sequretek.com/new-ransomware-variant-mole-campaign-using-fake-word-documents/ Mole Ransomware: A New Variant of CryptoMix https://blog.watchpointdata.com/mole-ransomware-a-new-variant-of-cryptomix