The initial price for decryption is set at $980, but if victims contact the threat actors within 72 hours, they will be able to purchase decryption tools for $490.Īdditionally, the ransom note offers victims the opportunity to send a single encrypted file for free decryption. The ransom note left by Hhee contains two email addresses and and offers victims the option to purchase decryption software and a unique key. Screenshot of files encrypted by Hhee ransomware:
Given its association with the Djvu family, Hhee may be distributed alongside other malicious software such as RedLine, Vidar, and information stealers. Hhee changes the names of files in the following manner: " 1.jpg" becomes " 1.jpg.hhee", " 2.png" becomes " 2.png.hhee", and so on. Upon completion of the encryption process, the ransomware drops a ransom note in the form of the " _readme.txt" file. Hhee operates by encrypting data and adding the ". The Hhee ransomware is a variant of the Djvu family that our team discovered during an analysis of samples on VirusTotal.
0 kommentar(er)
