Wyatt Roersma [7:31 AM]
Challenge Files Password:
Android OVA Password:
ecorpwin7 belongs to angela.moss
If we could get one of the interns at E-Corp to look at this new case from firstname.lastname@example.org about a ransomware incident?
Here is the NOTICE.txt from the case
A moth goes into a podiatrist's office, and the podiatrist's office says, "What seems to be the problem, moth?" The moth says "What's the problem? Where do I begin, man? I go to work for Gregory Illinivich, and all day long I work. Honestly doc, I don't even know what I'm doing anymore. I don't even know if Gregory Illinivich knows. He only knows that he has power over me, and that seems to bring him happiness. But I don't know, I wake up in a malaise, and I walk here and there... at night I... I sometimes wake up and I turn to some old lady in my bed that's on my arm. A lady that I once loved, doc. I don't know where to turn to. My youngest, Alexendria, she fell in the... in the cold of last year. The cold took her down, as it did many of us. And my other boy, and this is the hardest pill to swallow, doc. My other boy, Gregarro Ivinalititavitch... I no longer love him. As much as it pains me to say, when I look in his eyes, all I see is the same cowardice that I... that I catch when I take a glimpse of my own face in the mirror. If only I wasn't such a coward, then perhaps... perhaps I could bring myself to reach over to that cocked and loaded gun that lays on the bedside behind me and end this hellish facade once and for all... Doc, sometimes I feel like a spider, even though I'm a moth, just barely hanging on to my web with an everlasting fire underneath me. I'm not feeling good. And so the doctor says, "Moth, man, you're troubled. But you should be seeing a psychiatrist. Why on earth did you come here?" And the moth says, "Cause the light was on." We're sorry but 4,569 of your important documents have been encrypted! You must pay us 10.000 Monero to be given the key to get your information back. Browse to https://github.com/WaY5x3FIEJ1lvkFt7m5s/dec for instructions on how to proceed. Your personal key is 8ibuPEJyxO52JCflG3lJo_WQX2Wp0BGJi2HzuVMYa6EuAyHtqcfyGYV6xBA9So5q
Not infected just a plain text file
Just use our case management system at https://grrcon.e-corp.biz and solve what questions you can for each case. Not all cases will provide answers for each question. If anyone has any questions before sending in the data please contact me and I can help out in anyway!