virus .harma

[zidan4ek]

Hey.
There is a virus .harma on my PC. Avast Free did not see him. And the files were encrypted.
If I have the source of the exe and tmp files of the virus, can this help you to develop a decryptor? There is also an encrypted file before encryption?

[Pondus]

ID Ransomware   https://id-ransomware.malwarehunterteam.com/

No More Ransom   https://www.nomoreransom.org/

[zidan4ek]

I tried this, it didn’t help.
The question is, having the original virus, can it not be decrypted? Run it in a sandbox or virtual machine and learn?

[Pondus]

The encryption code/key need to be cracked, and those who know how to do that (if possible) is found at the links i gave you

Use backup of your files, you have a Gmail account so you have free online backup at Gdrive and google photos


Encryption 101: a malware analyst’s primer
https://blog.malwarebytes.com/threat-analysis/2018/02/encryption-101-malware-analysts-primer/

Encryption 101: How to break encryption
https://blog.malwarebytes.com/threat-analysis/2018/03/encryption-101-how-to-break-encryption/