hello. This is White Defender.

Ransomware can be dealt with if you prevent it in advance.
White Defender is an anti-ransomware solution that can protect against ransomware in real time. thank you안녕하세요. 화이트디펜더입니다.

whitedefender video

This is a video of White Defender responding to ransomware threats.

title
Afire Ransomware Afire
Registration date
2024-07-20
type
Ransomware
Treatment method
Diagnosis/treatment is possible with WhiteDefender.
change extension
File name.Extension.afire
ransom note
 
 
 

What is Afire Ransomware?
The malware analyzed by WhiteDefender, which is researching and developing ransomware security, is Afire ransomware.
Afire ransomware encrypts all file data and makes it inaccessible. For example, a file named "photo.jpg" will be changed to "photo.jpg.afire", and "sales.xlsx" will be changed to "sales.xlsx.afire".
Once this attack process is complete, a ransom note with the title "Restore.txt" will be created in every directory containing the file.
This ransom note explains how to purchase a decryption tool or contact the attackers.

Ransom Note Overview
All important data is encrypted in the ransom note. To obtain the decryption key to decrypt and recover file data, contact two email addresses: mbi.pentesting@keemail.me and hellomydata@onionmail.org. We are providing contact information so that you can do so. After contacting you, it appears that you will be asked to pay for the decryption tool.

A ransom note is a note containing a requirement to follow these instructions.

 

Ransomware name Afire ransomware
Changed extension .afire
Ransom note (payment information file) Restore.txt
characteristic Demand money after encrypting all file data
MD5 81d799643b0e6bcd450c0b8b4c48df60
SHA-1 56c4524fd4f696e1c1bf1cb4201b5b3d51b88db6
SHA-256 3656c44fd59366700f9182278faf2b6b94f0827f62a8aac14f64b987141bb69b
Basic protection method The most basic and effective protection method
is to use a reliable anti-ransomware program.
Keep your security software up to date.

 

 
Everyzone White Defender Co., Ltd. | CEO: Seunggyun Hong|Business registration number: 220-81-67981
Copyright ⓒEveryzone , Inc. All Rights Reserved.|