Date: 07/13/2019 09:51 PM
Size: 2.27 MB
Requires: Win 10 / 8 / 7 / Vista / XP
Downloads: 5218 times
Avast Decryption Tool for AES_NI can help decrypt the AES_NI ransomware strain.
There are known multiple variants with different file extensions. AES_NI uses AES-256 combined with RSA-2048.
The ransomware adds one of the following extensions to encrypted files:
In each folder with at least one encrypted file, the file “!!! READ THIS – IMPORTANT !!!.txt” can be found. Additionally, the ransomware creates a key file with name similar to: [PC_NAME]#9C43A95AC27D3A131D3E8A95F2163088-Bravo NEW-20175267812-78.key.aes_ni_0day in C:ProgramData folder.
The file “!!! READ THIS – IMPORTANT !!!.txt” contains the following ransom note seen in the screenshot below.