Back

Can someone label this #Ransomware family? Spread through malspam with a VBS attachment

Ransom note: Decryptfiles.txt
Email: edfr789@tutanota.com / edfr789@tutamail.com

VBS:
https://bazaar.abuse.ch/sample/f7cbe1d0926c6e0895951882ff430d624630cd14b4d3b1a4c837a3feac71dd48/

Payload (exe):
https://bazaar.abuse.ch/sample/d2100ffe58eb50c05d97a3da738ccd1f0be9672c057c26a10140af80595b78c3/

Payload (dll):
https://bazaar.abuse.ch/sample/4b4a87552c44158fb53a72c7294319b0ddde9f99f460425ad5997d3b9121cd1e/

Decoy PDF