/Thanatos

Thanatos Ransomware Source Code

Primary LanguageC++

Thanatos Ransomware

Thanatos encoding in AES all user files in following directories:

C:\Users\%username%\Desktop
C:\Users\%username%\Documents
C:\Users\%username%\Downloads
C:\Users\%username%\Favourites
C:\Users\%username%\Music
C:\Users\%username%\OneDrive
C:\Users\%username%\Pictures
C:\Users\%username%\Videos

README.txt

---------------------------------------------------
  ________  _____    _   _____  __________  _____
 /_  __/ / / /   |  / | / /   |/_  __/ __ \/ ___/
  / / / /_/ / /| | /  |/ / /| | / / / / / /\__ \ 
 / / / __  / ___ |/ /|  / ___ |/ / / /_/ /___/ / 
/_/ /_/ /_/_/  |_/_/ |_/_/  |_/_/  \____//____/  

---------------------------------------------------
                Thanatos v1.1

Your files was encrypted. To decrypt your files, 
follow next steps:

1. Send $200 to one of these wallets:
BTC: 1HvEZ1jZ7BWgBYPxqCvWtKja3a9hsNa9Eh
ETH: 0x92420e4D96E5A2EbC617f1225E92cA82E24B03ef
BCH: qzuexhcqmkzcdazq6jjk69hkhgnme25c35s9tamz6f

2. Send your TXID and your MachineID to mail
E-Mail: thanatos1.1@yandex.com
MactineID: *MachineID*
 
---------------------------------------------------
Do not waste your time, files can only be 
decrypted by our decode tool.

Links

VirusTotal

VirusCheckMate

Run4Me

Media

bleepingcomputer.com

xakep.ru

MalwareHunterTeam‏