hello. This is White Defender.

Ransomware can be dealt with if you prevent it in advance.
White Defender is an anti-ransomware solution that can protect against ransomware in real time. thank you안녕하세요. 화이트디펜더입니다.

whitedefender video

This is a video of White Defender responding to ransomware threats.

title
LockShit BLACKED ransomware
Registration date
2024-04-28
type
Ransomware
Treatment method
Diagnosis/treatment is possible with WhiteDefender.
change extension
.KJHEJgtkhn
ransom note
 
 

What is LockShit BLACKED (LockShit4.0) ransomware?
The malware analyzed by WhiteDefender, which is researching and developing ransomware security, is LockShit BLACKED ransomware.
LockShit BLACKED ransomware encrypts data and changes file names. The extension “.KJHEJgtkhn” is added to the existing file name.
For example, a file named "a.jpg" will be changed to "a.jpg.KJHEJgtkhn", and "b.png" will be changed to "b.png.KJHEJgtkhn". Once this process is complete, the desktop wallpaper will be changed and a ransom note with the title "KJHEJgtkhn.READMEt.txt" will be created.



A ransom note is a note containing a requirement to follow these instructions.

 

Ransomware name LockShit BLACKED Ransomware
Changed extension File name.Extension.KJHEJgtkhn
Ransom note (payment information file) KJHEJgtkhn.READMEt.txt
characteristic Demand money after encrypting all file data
MD5 02b16114605b2cc73a106dc57721f19f
SHA-1 bc3a45a72fb720b3498f3d063337e0bb883b60a5
SHA-256 b1181bc89db74b9ccb317298b5b5b33b0f0c73854d5e1e2167a9a84eda367366 
Basic protection method The most basic and effective protection method
is to use a reliable anti-ransomware program.
Keep your security software up to date.

 

Previous post
divinity ransomware
next post
Jaff Ransomware
Everyzone White Defender Co., Ltd. | CEO: Seunggyun Hong|Business registration number: 220-81-67981
Copyright ⓒEveryzone , Inc. All Rights Reserved.|