IoC (TT Malware Log)

Malware の IoC(Indicator)情報

◆注意◆ マルウェア解析専析家向けサイト

     FQDN, URL,IPアドレス等はそのまま掲載しています

** Caution ** Malware expert site

                    FQDN, URL, IP address etc. are posted as they are








Your company's network has been breached and infected with MegaCortex Malware.

All of your user credentials have been changed and your files have been encrypted.
We ensure that the only way to retrieve your data swiftly and securely is with our software.
Restoration of your data requires a private key which only we possess.

To confirm that our decryption software works email to us 2 files from random computers.
You will receive further instructions after you send us the test files.

After receiving payment we will provide you with the decryptor including its full source code and credentials to your computers.
We have also downloaded your data to a secure location. In the unfortunate event of us not coming to an agreement we will have no choice but to make this data public.
Once the transaction is finalized all of copies of data we have downloaded will be erased.
We will provide any assistance if needed.

Contact emails:


google: ca0d1e770ca8b36f6945a707be7ff1588c3df2fd47031aa471792a1480b8dd53
google: 5ff14746232a1d17e44c7d095e2ec15ede4bd01f35ae72cc36c2596274327af9
google: e362d6217aff55572dc79158fae0ac729f52c1fc5356af4612890b9bd84fbcde



◆New Megacortex Ransomware Changes Windows Passwords, Threatens to Publish Data (Bleeping Computer, 2019/11/05)