search

richnadeau / OSQuery-Training-Course

1 stars 0 forks source link

Hunting Pay2Key #3

Open richnadeau opened 2 years ago

richnadeau commented 2 years ago

Was given a Pay2Key box, need to start hunting down Pay2Key on the box.

richnadeau commented 2 years ago

Worked on this Friday, was set back by my Fleet server being on fire and having to recreate it from scratch. Added the Pay2Key box to new Fleet server, found encrypted files, found ransom demand message, and found Ransomware's log file left over so far and added it to the GitBook site.