ANUBI Ransomaware as a Service

[silentbob]

We are recruiting people to work using this cryptolocker:
- Made in C++
- Encryption key generator (1 key per machine)
- Encrypt files on all connected disks, devices and network drives
- Encryption of files is multithreaded, The number of threads is set depending on the processor cores, the speed is at the level
- Offline locker communication via email
- Decrypt test files to the victims to ensure that we can decrypt their files
- A simple README to write an email as soon as possible
- Added startup README file
- The decryption key is encrypted using RSA-key
- Disable Notification center (for no warning to update antivirus or uninstalled antivirus warning balons)
- Deleting a shadow copy and restoring the system
- There is no list of crypted extensions it encrypts all the files
- Encrypts the Desktop of current user as last after all the rest is encrypted(to not be notice only when its to late)
- Encrypt all desktop of all users as last things when all there rest is encrypted to (for more stealth)
- Disable control Center (for more stealth no unistalled antivirus warning ballons)
- Open ReadMe once all drives are encrypted
- Will not encrypt %AppData% of all user( to prevent loader loss)
- Windows Defender Silent Disabler Permanently work all windows os
- Removed EoF support (to make crypt with any crypter)
- offline locker
- Improved speed of crypting files
- Stub file only 50 kb
- Encryption is using RSA impossible to decrypt
Your share on the generated payments are calculated this way:
80% you 20% me
Only partnership no Selling
Contact XMPP Jabber: mailto:[email protected]
As you can read about us on google our team will be never decrypted
Here some reference:
https://malwaretips.com/blogs/remove-anubi-ransomware/
Code:

Is it possible to decrypt files encrypted by Anubi ransomware?

No, at this time it’s not possible to recover the files encrypted by the Anubi ransomware.