hello. This is White Defender.

Ransomware can be dealt with if you prevent it in advance.
White Defender is an anti-ransomware solution that can protect against ransomware in real time. thank you안녕하세요. 화이트디펜더입니다.

whitedefender video

This is a video of White Defender responding to ransomware threats.

title
Eldorado ransomware
Registration date
2025-04-29
type
Ransomware
Treatment method
Diagnosis/treatment is possible with WhiteDefender.
change extension
.00000001
ransom note

What is Eldorado Ransomware?
The malware analyzed by WhiteDefender, which researches and develops ransomware security, is Eldorado Ransomware.
Eldorado is designed to encrypt file data and change the extension to make it unusable. 
It is a RaaS attack group that targets both Windows and Linux systems. 

Eldorado renames the user’s important data files by adding the extension “.Eldorado”.
For example, a file named “download.jpg” will be renamed to “download.jpg.00000001”, and “sales.xlsx” will be renamed to “sales.xlsx.00000001”.
Once this attack process is complete, a ransom note will be displayed in a pop-up message, and a ransom note titled “HOW_RETURN_YOUR_DATA.txt” will be created in every directory.


A ransom note is a note that contains instructions that you must follow.

 

Ransomware name Eldorado ransomware
Changed extension .00000001
Ransom note (payment information file) HOW_RETURN_YOUR_DATA.txt
characteristic After encrypting all file data, money is requested
MD5 315a9d36ed86894269e0126b649fb3d6
SHA-1 caaa1f85dd333c9d19767b5de527152d5acbc2a4
SHA-256 cb0b9e509a0f16eb864277cd76c4dcaa5016a356dd62c04dff8f8d96736174a7
Basic protection methods The most basic and effective protection method is
to use a reliable anti-ransomware program.
Keep your security software up to date.

 

Previous post
Xp64 ransomware
next post
Prince Ransomware
Everyzone White Defender Co., Ltd. | CEO: Seunggyun Hong|Business registration number: 220-81-67981
Copyright ⓒEveryzone , Inc. All Rights Reserved.|