360工作人员-驱动哥 发表于 2019-8-28 17:16

Nemty勒索病毒家族详情

本帖最后由 Potato 于 2020-4-10 17:17 编辑

相关阅读:Nemty勒索病毒样本分析,我是链接请点我!

勒索病毒家族名称:Nemty
是否支持解密:支持解密
详情:
被加密文件:


勒索提示信息:
文件名:NEMTY-DECRYPT.txt
文件内容 :
-------------------------------------------------------------------------------
---=== NEMTY PROJECT ===---

[+] Whats Happen? [+]

Your files are encrypted, and currently unavailable. You can check it: all files on you computer has extension .nemty
By the way, everything is possible to restore, but you need to follow our instructions. Otherwise, you cant return your data (NEVER).

[+] What guarantees? [+]

It's just a business. We absolutely do not care about you and your deals, except getting benefits.
If we do not do our work and liabilities - nobody will not cooperate with us.
It's not in our interests.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key.
In practise - time is much more valuable than money.

[+] How to get access on website? [+]

1) Download and install TOR browser from this site: https://torproject.org/
2) Open our website: zjoxyw5mkacojk5ptn2iprkivg5clow72mjkyk5ttubzxprjjnwapkad.onion/pay

[+] Important [+]

When you open our website, upload configuration file from this folder: C:\Users\admin
-------------------------------------------------------------------------------
解密:

传播渠道:
Nemty勒索病毒最早是在2019年8月首次被发现,最初被发现是伪装自己成paypal网站,诱导用户下载程序;在2019年8月底发现该团队改用RIG漏洞利用工具进行传播,在2019年10月份发现该勒索病毒还通过Trik(又被叫做Phorpiex)垃圾邮箱僵尸网络进行传播。该垃圾邮箱僵尸网络已经存在10多年,被用来传播多种病毒木马。Nemty在1.6版本中新增尝试用硬编码到代码中的账户名和密码暴力破解共享文件夹密码模块,不断的再提高其自身的功能。防护建议:
1.多台机器,不要使用相同的账号和口令
2.登录口令要有足够的长度和复杂性,并定期更换登录口令
3.重要资料的共享文件夹应设置访问权限控制,并进行定期备份
4.定期检测系统和软件中的安全漏洞,及时打上补丁。
5.定期到服务器检查是否存在异常。查看范围包括:
a)是否有新增账户
b) Guest是否被启用
c) Windows系统日志是否存在异常
d)杀毒软件是否存在异常拦截情况
6.安装安全防护软件,并确保其正常运行。
7.从正规渠道下载安装软件。
8.对不熟悉的软件,如果已经被杀毒软件拦截查杀,不要添加信任继续运行。

360fans_uid13127684 发表于 2019-8-29 09:52

问下啥时候可以解密啊,表示中了

Potato 发表于 2019-9-26 18:59

家族:Nemty勒索病毒家族
被加密文件后缀:_NEMTY_XXXXXXX_

勒索提示信息文件名:_NEMTY_XXXXXXX_-DECRYPT.txt
勒索提示信息内容:
---------------------------------------------------------------------------------
NEMTY PROJECT V1.5

Don't worry, all your encrypted files can be restored.
It's a business, if we can't provide full decryption, other people won't trust us.

In confirmation, that we have decryption key, we can provide you test decryption.
On our website you can upload 1 encrypted picture (png,bmp,jpg,gif) and get it decrypted.

There is no way to decrypt your files without our help.
Don't trust anyone. Even your dog.

There is 1 way how to get to the website:

1) Any browser
a) Open your browser
b) Type this url: nemty.hk/pay
c) Upload this note

NEMTY DECRYPTION KEY:

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
---------------------------------------------------------------------------------

360fans_A4pv3C 发表于 2019-9-29 23:04

我怎么提供不同类型样本

360fans_A4pv3C 发表于 2019-9-29 23:10

一个样本提供了,怎么加另一个样本

360fans_A4pv3C 发表于 2019-9-29 23:11

NEMTY PROJECT V1.5

Don't worry, all your encrypted files can be restored.
It's a business, if we can't provide full decryption, other people won't trust us.

In confirmation, that we have decryption key, we can provide you test decryption.
On our website you can upload 1 encrypted picture (png,bmp,jpg,gif) and get it decrypted.

There is no way to decrypt your files without our help.
Don't trust anyone. Even your dog.

There is 1 way how to get to the website:

1) Any browser
a) Open your browser
b) Type this url: nemty.hk/pay
c) Upload this note

NEMTY DECRYPTION KEY:

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

360fans_A4pv3C 发表于 2019-9-29 23:27

中了这6种类型的病毒,我怎么单独添加样本库,方便计算秘钥
_NEMTY_4EISdhn_-DECRYPT.txt
_NEMTY_4EISdhn_-DECRYPT.txt
_NEMTY_J5f6Sru_-DECRYPT.txt
_NEMTY_KnvMvtN_-DECRYPT.txt
_NEMTY_lQkVwAy_-DECRYPT.txt
_NEMTY_qZeKn1w_-DECRYPT.txt

360fans_WroNYy 发表于 2019-10-7 17:12

因本人不慎,中了这个病毒,导致朋友电脑上的文件全被加密。终于找到这里,望大神不吝赐教,万分感谢!
NEMTY PROJECT V1.5

Don't worry, all your encrypted files can be restored.
It's a business, if we can't provide full decryption, other people won't trust us.

In confirmation, that we have decryption key, we can provide you test decryption.
On our website you can upload 1 encrypted picture (png,bmp,jpg,gif) and get it decrypted.

There is no way to decrypt your files without our help.
Don't trust anyone. Even your dog.

There is 1 way how to get to the website:

1) Any browser
a) Open your browser
b) Type this url: nemty.hk/pay
c) Upload this note

NEMTY DECRYPTION KEY:

IXDX13I7A9lEjBzWPyn2qUxmM/Ryqo6d2q4eFlTSttJ245LggdZjCwDZDNCCkofCGAxZRBEdox8/vmF9Z83vpx7pKvR6PcQa5TbvwkXonNizwvni9DuNx4WGnc22FKcYHL1qWi9GBg4jENiMRCqbZoPpadMeOHk9UTJz+h4pv+YtJyJJxG0smwi5qmmhDEw/GmGwO8wIcdAszGnsZUJMgXEFiqKHHcbPf2K9+/oFyIYwYw+FxCR5LDeRcRqavNNgB6sThcxXBj/XhqLf3rjcBvEwltNAgtoLWOiN3N36wRdZZmY80u8TufJ/tUxctMEWcyE2hfs9dWGytea5UswNbRTF2dsoe+zZHR7FZv2Ya0GAdA3jvESkSyPS64PYqeRE85dHdhLbsali1sv/MbA7nAwDdHzt8gNB833w+Pc7kGtp402PbTy3CsZkN1PMvHgqp1/3qi2HN3uCYzBm1/r8ijsgcDhvEHTQkCJnisC5Og8LQjIOrarZ15ZU363Z9oIO2HXBEC0/2mr+RxF19jlbtzy1N3GcFhxAKjAz8MuzWkKZAMMvyj1bAhjAba0LqTUpEMv2FJiRBpUGaukQK3IsxF6JLotaAAuvQAGYS/5SsGm/ueGd+K0RoB9MPGVq+vGatIgNXoM08e6+GDMU8JyB2GbOPYsyI1PNHxtKC9+gfPDPkZ/S6qB3TMRyeOy9OdQyQPLNB0VngpiC0+9w00DIRx0xwEYmJK7YEy7bb/QiDhhhUnI5NnDTe97X3n3Bqwr6CSBoUKYl7NZC/0KtMnuo5OaV2f9WjH8tpC8JSsAFXIydFsQO7TLotPpur2Xq5qPH6enCU1eOzrOz46GzOgaBY4TBXGnp5vdXyjRZ/jkFZohttIWMBAPLTkFQL2kkmAiXXw84W0OOO96d9vFj+4l+StWXALKI2IRotP+PDLDEJ70f9TZ8WZE2curQuwwapkLHlyohNMBaUX8Fgm68XkqzJkWcaL+UZgMktJRjizu6NgSSSjw7NUNjC5xd6Yp5JlbWxkyZLib0M8rjS7swYvEp3v8ewXj38a0c0jvk3hzF67gyKQzUJSkDX0yl03uzYbrnIoG89uh8hN+N57AwryiQOCyztwtr8f/6ZwftW2sKF9x26QHaVmpBGprKpiZ/QUfTSK0Zlc7WMtXuwhUDptTYu256brMeUZPtLO/k8P7Iao5g18BhKAAOdnLBhxlt99JyatveFa2PiFCzAQZx6CGFUoh7dmSgsrNFEGaQszw55/kuxwtVUxNs03K3i+bQl/gPb+/fecFPd+JOGTk3MrmkTDmmy8LpqYQyBl/h093XxldxBmaThWq1Jvauh28MmIhTcOMUlIGcQgQexBxVo8uChA==ZJHWxTFxr7uUzB1TAl1EsXY8ZUwpHWREJ9ZFk68RndplpjLUDhIAeswyFHyfYVmpg3IzsuZB+58izxIF8Zc3FIDRFo4AkNSj94LBFeTVfrr8fXuIduovaB+w6FYeCANtW00r4g1H5j8W6jGIDXsUZXqfkmNTUBZoXhmM1UIvj0wxl3znl5qvPYKJdp2/NZYrvpyO/lpVtIarUHtVhwT6vEa+gXErCpIaHHyp0/aPwST4lu2vAg3DZdXLfylpbB9GDkjFKA+bh8yoT+OGksM/TD2VUHI7hmSpxlDHcx/GjwolyH6CwjmOlZctw8WRA0Y57JvF7Xk/B4fGg8uXegQmNdOHMMTqZ8HQW8LaaVsTIlgDQnzMlPyeXgc/7OjSOxTQNk5YXtFLvwiF7Xe6iK5BpiD8OGqO9g7N9iUJhcneQL5R5O2tZNt5iFgyky83FYFHJbvmIfvinI1Jr88q1k3yFFKqge/dk2t7J3t8l7j1WEp0pQvEL+XHxeGAneM9GUHrQOr4CfAzI3+fg3VCz+j/Xc7MpXHI0hrYJfuAHv3PaYTXjI9EHQhC6YOYWkQN27YNagfycgangcmG59STAdnA+gOEoaOSfBGST8l+vXBD09n6uDDW9nv3jZPuIaBBsJV7jXjKWgSLvpT6/ewLUoZKANPzxTDkBfe5zaUtudYzT765aeHbI4aaQ51QK6KJlgOQjzVCfUELrJqta5mAMl7ETZQDdbvGC1oUBN0mAff1GUDybpvnRoFW/GNwxGTT7YLA8E4MtiIxa7KGEEiZYQjvhccYyBTB0BBGm8BELIYuHnC0qELBRp5xIJ9dlFb06CJh4VDSB6IgrGPMznXJO/G/W4cAOBFHfg8QPd4ODXs5BWCYaA6zKAL9DNxKZsCnP9z3JvSekB2gJVPRFFrCAYT6oNQjU9KFbI4ovhjfB3q56mDrFH6zqc37G3tHb0bJUQvxDcGbPEbETzn5V/L64hpDzpje4EjfWnv+X2tbbf4Sgzdxf35RZnQ3j1BN77XbprxzEhzOqSr/JjZ9MSSy8gSRCTwwEEbUBbXTHjgMArBWcnI2tox+ocWQGle5qkc/YmVOARXqsPBfcYFGKnQRp+zsM4Nnfn5XcGXwbI+XxvqvF6fKbysARLgCof3/8OoUMOMFfOx0qa0BETV2EWXJlt7e/C+N93kN3eIWC0hp9u7eKerBwTHM2c49MT6znexW+fMv0TFW0LmIeB7TL/fiYcjEC56uexG9opu2rLmLf09xYd9cPNQwrsJLrCcRNEoNbYgWxCv6hYi4lOyu1lwYAtHvfN544kUC4aviDGUMN7iDeTK60hxcrZH8CRxQYtZYXpNqhCW4nbe31AYgBvi32fLRdg==CNEMA1OYToMVEhm2359p3XZLBqgDPRfAkXPU0G/Wms+qyJZ9Xxw1Wxj0iWgrd+Bb7n9w3rTvfwA2lkHP516e8xlMwz2C+vs9N3iHm8MuNJ/0DfmenCQxkt9Tlp2Y0lfxUN8DZ1WdX0Ck/vtTtjhIqOslZvy+fqF/EZLEwocbpUXKbpgVOf9rRo66sI9xvYwKikb6mmfQP0Wk02YKg0s7tLzyO1aCW+kcfchIBpubkc6SuNNbxnvtV+/A4/Rr2NhgjbrvmJMQxmDbVIJnBOrLVHJDnGcSqnUEmmN9tzIRR1YxukYECxG7SZqDm8IsDeBvt6H3O+OF2vq8XuhlKG/zu3bLB24gWyvnfLMNu/1RKgfZJhOIZ1fKifFWE8ObCDWau/3ZWsbJizKDERNQ8VeYRqM+3HEw56Td2BBMyzlb7z1c/wc5mQhTYIm4f2jegXOnPtAsZu2acteUfYTnD+XQwJQBclZ/6WO14w8lkchbBq2gPIDkJJw1h8K8UHa+lva0YXKKZ9SFa1+eW8Xv2IR3rKSyJdXjKzi2TjEmtfwjcU8w3/fAXck01Gs4bwB4QvFJvu1PkoW8Ggv+9apxUaHAR4eLt1c7tQNyx55sVwtTxfJmCBz1Qpq61hlrAmNv8orskO6Ngquc/Y1EfhxEZfXXjBinGUYjsUMtaY3KdbRbt9P2BVEKHXwVTO15BlmNaQ+Dz57WIUh+1u8boBth/Vy/YlkiF2Cl2gc0ct3FLJaVuIrC+UGv+kcqKBbntrb5jaylOZOl1/lRPCkAu/I4ML9Qwr/9cAgB9htIAECA5fpbG6BSTAslCPisQOdnj1v97VYW+O6LSgGOjrSN9eDKopvGJTxjkJq3R3bObzpgwOSlmILIkZaUtPxcW8Ax8PpVBST/bkY0UYJqxxAl8WeaKX+/ts4NSwv+8Bye8tORnOjiIip1Jdmscads4oiG5OVNhtN88LH6nVs/mI55hJp//mZE7s40o2cP0mxemPRkCnC56J3aDKEg6mST7FXOJC0h5DoftioupVLaFsua2YFd2JW5BcKB1/6dVK058dbZk4xh5K163CCkNBEv79Iu7buKnF4A7Ma6H2FDCJHQfz0H6GiDpOzVVkNNOimjtmiJCJwJoysEodkq5NZ8+xMJ0kZkcuXJ7j1aVQDrtpPbY3O9bDEDNBaw3gb/UIaqVpZ2dpwV5E/7bHl6uSDoItmdzkNuglRwvS2dtfx75R6Gafw0ay5jJWkDCB43O6is2ENFR8HmBzYWEyLwKIKTvWyEpweibdDmyjMCeMdElKcFJZWv6Fe47aQIgl1c4vGt91G3w4QhRevz433lQb/NY2n/gha2bcrUbuxu9UvVRGeo6OXO+vIzQA==

以上是我中的病毒信息,谁知道该怎么解密,万分感谢!本人邮箱:919641895@qq.com,电话:15010256993,谢谢!

360fans_WroNYy 发表于 2019-10-7 17:13

因本人不慎,中了这个病毒,导致朋友的电脑文件全被加密,紧急求助,万分感谢!
NEMTY PROJECT V1.5

Don't worry, all your encrypted files can be restored.
It's a business, if we can't provide full decryption, other people won't trust us.

In confirmation, that we have decryption key, we can provide you test decryption.
On our website you can upload 1 encrypted picture (png,bmp,jpg,gif) and get it decrypted.

There is no way to decrypt your files without our help.
Don't trust anyone. Even your dog.

There is 1 way how to get to the website:

1) Any browser
a) Open your browser
b) Type this url: nemty.hk/pay
c) Upload this note

NEMTY DECRYPTION KEY:

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

以上是我中的病毒信息,谁知道该怎么解密,万望赐教,谢谢!

360fans3521902 发表于 2019-10-10 16:42

兄弟我的中了是NEMTY PROJECT V1.6   ,很想了解它是从哪里感染进来的

360fans629209753 发表于 2019-10-10 20:23

本帖最后由 360fans629209753 于 2019-10-10 20:25 编辑




怎么添加多个密钥?
现在只有_NEMTY_jCGIoIZ_-DECRYPT.txt密钥

Potato 发表于 2019-10-29 15:05

---> NEMTY REVENGE 2.0 <---

Don't worry, some of your files have extension .NEMTY_S15XM6N and they are encrypted.
But you can return them!

In confirmatiom, that we have private decryption key,
We can provide test decryption for 1 file (png,jpg,bmp,gif).
It's a business, if we can't provide full decryption, other people won't trust us.

There is no way to decrypt your files without our help.
Don't trust anyone. Even your dog.

main mail: elzmflqxj@tutanota.de
if no answer: helpdesk_nemty@aol.com

Don't change decryption key below!!!

NEMTY DECRYPTION KEY:

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

360fans_e0Dle3 发表于 2019-11-14 13:54

你好,我们服务器中了勒索病毒,文件后缀.wiki

360fans_e0Dle3 发表于 2019-11-14 13:56

11月8号中的,服务器被加密,数据不能使用。本地备份文件也没加密了,无法恢复数据。求助!

Potato 发表于 2019-11-14 16:41

家族:NEMTY REVENGE 2.0
勒索提示信息:
---------------------------------------------------------------------------------
---> NEMTY REVENGE 2.0 <---

Don't worry, some of your files have extension .NEMTY_84UPY3V and they are encrypted.
But you can return them!

In confirmatiom, that we have private decryption key,
We can provide test decryption for 1 file (png,jpg,bmp,gif).
It's a business, if we can't provide full decryption, other people won't trust us.

There is no way to decrypt your files without our help.
Don't trust anyone. Even your dog.

main mail: elzmflqxj@tutanota.de
if no answer: helpdesk_nemty@aol.com

Don't change decryption key below!!!

NEMTY DECRYPTION KEY:

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

Potato 发表于 2019-12-16 11:39

家族:Nemty
勒索提示信息:
---------------------------------------------------------------------------------
---> NEMTY 2.3 REVENGE <---

Some (or maybe all) of your files got encryped.
We provide decryption tool if you pay a ransom.

Don't worry, if we can't help you with decrypting - other people won't trust us.
We provide test decryption, as proof that we can decrypt your data.

You have 3 month to pay (after visiting the ransom page) until decryption key will be deleted from server.
After 3 month no one, even our service can't make decryptor.

1) Web-Browser
a) Open your browser.
b) Open this link: http://nemty.top/public/pay.php
c) Upload this file.
d) Follow the instructions.

2) Tor-Browser
a) Download&Install Tor-Browser.
b) Open Tor-Browser.
c) Open this link : http://zjoxyw5mkacojk5ptn2iprkivg5clow72mjkyk5ttubzxprjjnwapkad.onion/public/pay.php
d) Upload this file.
e) Follow the instruction.

<BEGIN NEMTY KEY>
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

360fans_u42238929 发表于 2020-3-16 15:40

兄弟,我的中了NEMTY 2.6 REVENGE 该怎么解密文件。求指点

360fans_u42238929 发表于 2020-3-16 15:40

兄弟,我的中了NEMTY 2.6 REVENGE 该怎么解密文件。求指点

360fans_7akwc9 发表于 2020-3-21 19:52

---> NEMTY 2.6 REVENGE <---

页: [1]
查看完整版本: Nemty勒索病毒家族详情