Aur0ra
(Active)
Description
This entry is under construction. However, we have included some details below.
Ransomware Type
Crypto-Ransomware
Data Broker
First Seen
Extortion Links
Moyen
Lien
DLS File Server
http://pavregldzg2ypbd3gxbil2suxfok7ykmcknwhkli24anpks6lndymyyd.onion
DLS File Server
https://exposedrecords.io
TOR
http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion
Extortion Types
Direct Extortion
Double Extortion
Free Data Leaks
Communication
Moyen
Identifiant
TOR
http://ijexszhscln27nl263lmcd7tx3jttkhm4wjhd4e3y6r4csdbfyeprvid.onion
Encryption
Type
Hybrid
Files
AES-256-CTR
Key
RSA-4096
Additional Encryption
Intermittent
File Extensions
Type
File Extension
<no extension change>
Ransom Note Name
!!!README!!!DO_NOT_DELETE.txt
Samples (SHA-256)
81ca5fc6b55accdbc44266d66bd72c7c4152a75b215593adc433d51250054333
Known Victims(7)
| Industry Sector | Pays | Extortion Date | Amount (USD) |
|---|---|---|---|
| Healthcare & Medicine | United States | ||
| Home Furnishing & Design | Australia | ||
| Hospitality & Leisure | Maldives | ||
| Legal | United States | ||
| Manufacturing | United States | ||
| Transportation, Distribution & Logistics | United States | ||
| Insurance | United States |