Ransomware - Mimic

Mimic
Aliases
N3ww4v3
Everything
Decryptor Available
No
Description

This entry is under construction. However, we have included some details below.

Ransomware Type
Builder
Crypto-Ransomware
HumOR
First Seen
Lineage
Mimic (Builder)
Extortion Types
Direct Extortion
Extortion Price Increases
Amount
$500
$1,000
$1,693
$2,000
$3,000
0.15BTC($4,282)
0.4BTC($27,749)
$150,000
Moyen
Identifiant
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected] 
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
Email
[email protected]
ICQ Messenger
Anilorakbest
ICQ Messenger
BABKAALYOEBALO
ICQ Messenger
Bigspermhorseballs
ICQ Messenger
CHTO_S_EBALOM
ICQ Messenger
GREEDYFATHER
ICQ Messenger
Hairysquid
ICQ Messenger
herkonasladok
ICQ Messenger
Kasperskyransomware
ICQ Messenger
mcdonaldsdebtzhlob
ICQ Messenger
NEEDTOPAYTOMYHORSE
ICQ Messenger
NESSELKAIEBALOM
ICQ Messenger
ONIONHUNTER
ICQ Messenger
PANIN
ICQ Messenger
PISCOSTRUI
ICQ Messenger
pisunellakonososeila
ICQ Messenger
PODSTAVLIAIPOPKU
ICQ Messenger
PORTHUB
ICQ Messenger
SEXYHORSES
ICQ Messenger
SOPHOSANTIVIRUS
ICQ Messenger
THAIHORSEFUCKERS
Skype
Anilorakbest Decryption
Skype
BABKAALYOEBALO DECRYPTION
Skype
Bigspermhorseballs DECRYPTION
Skype
CHTO_S_EBALOM DECRYPTION
Skype
GREEDYFATHER Decryption
Skype
HERKONASLADOK DECRYPTION
Skype
KASPERSKY DECRYPTION
Skype
MCDONALDSDEBTZHLOB DECRYPTION
Skype
NEEDTOPAYTOMYHORSE DECRYPTION
Skype
NESSELKAIEBALOM DECRYPTION
Skype
ONIONHUNTER DECRYPTION
Skype
Panin Decryption
Skype
PISCOSTRUI DECRYPTION
Skype
pisunellakonososeila decryption
Skype
PODSTAVLIAIPOPKU Decryption
Skype
PORTHUB DECRYPTION
Skype
SEXYHORSES DECRYPTION
Skype
SOPHOSANTIVIRUS DECRYPTION
Tox
95CC6600931403C55E64134375095128F18EDA09B4A74B9F1906C1A4124FE82E4428D42A6C65
Tox
9E7B8EE126E712BECE1D6A84DD776F25646C13B1E7CDBF00169078EE6EAC653E9B455D71BEC0
Tox
E12919AB09D54CB3F6903091580F0C4AADFB6396B1E6C7B8520D878275F56E7803D963E639AE
Encryption
Type
Hybrid
Files
AES-256
Key
RSA-2048
Additional Encryption
ChaCha20
Crypto Wallets
Blockchain Type
Crypto Wallet
BTC
1MifHZ4r1xoaA4PVyGfHZL82hwCdqWjBwN
BTC
1N7jvUNUaiDSKuFiuBDV418QZmHh8d5ifY
BTC
bc1qq3e6xklnm9wzp4jg5fal8yx3x6pvr4n9a8mx9a
.05ru26hw
.0nk1udlu
.0v3yT8
.1000USD
.1cy931cn9v
.1tddcv2qv
.2n1d4b4fv3
.3kfAp
.4ru9b88d70
.7dyedhqu59c
.8s1lujv4rq
.9niOpX
.an8uxv2w
[email protected]
.BABKAALYOEBALO
[email protected]
[email protected]
.bigspermhorseballs
.CHTO_S_EBALOM
[email protected]
.crypt
.damarans
[email protected]
[email protected]
.darth
.dataland
.ELPACO-team
.en2v5k1e
.exe
.Fora
.FreeWorldEncryption
.g0eI9
[email protected]
[email protected]
.giapk33vw
.GREEDYFATHER
.h777XRgNVM777xM
.Hairysquid
.hicrypt
.HONESTBITCOIN
.honeycorselikesmoney
.HONEYHORSELIKESMONEY
.HORSESARESEXY
.HORSESHITEVERYWHERE
.Indianguy
.KASPERSKY
.n3ww4v3
.NEEDTOPAYTOMYHORSE
.NemoRans
[email protected]
.NESCHELKAIEBALOM
.NESSELKAIEBALOM
.PANIN
.PISCOSTRUI
[email protected]
.PODSTAVLIAIPOPKU
.PORNHUB
.PORT HUB
.PORTHUB
.processcrypt
.QUIETPLACE
.qy98nm2ssd
.r0Qp@3M
.shiverer
[email protected]
.SOPHOSANTIVIRUS
.t4c2ewdqca
.TeaMp0ison
.TELEGRAM
.Telegram@datadecrypt
[email protected]
[email protected]
.TOLKONEPERDITE
.ul8dlsj86v
.vqu73pg24d
.w9lq64h4
.WORM
.Z4iDwa9
.Zero_day
.ZERODAYHORSE
=== Readme.txt
Amigodainapasik_Decryption.txt
Anilorak_Decryption.txt
Bigspermhorseballs_Decryption.txt
---BILGILENDIRME----NOTU---.txt
CHECK_MENU_NE_STOIT_ZHDAT_I_SCHELKAT_EBALOM.txt
CHETAI_MENYA_NE_STOIT_ZHDAT_I_SCHELKAT_EBALOM.txt
Comunicacin.txt
Contact-Note.txt
Datadecrypt.txt
Decrypt_me.txt
DECRYPTION_INFO.txt
FreeWorld-Contact.txt
hashlist.txt
HOW_TO_DECRYPT.txt
How-to-decrypt.txt
---IMPORTANT---NOTICE---.txt
INDIANGUY_DECRYPTION.txt
info.txt
Instruction.txt
Instructions.txt
Kaspersky_Decryption.txt
MIMIC_LOG.txt
NEED_PAYMENT_README.TXT
OMO_OMO_Decryption.txt
PHILIP_KIRKOROV_DECRYPTION.txt
PISCOSTRUI.txt
PODSTAVLIAIPOPKU_DECRYPTION.txt
READ_ME_DECRYPTION_HAIRYSQUID.TXT
READ_ME_MY_FRIEND.txt
README.txt
----Read-Me-----.txt
Recovery.txt
restore-my-files.txt
rtmlocker_DECRYPTION.txt
TELEGRAM_RASHIFROVKA.txt
What_happened_read_me.txt
Zero_day_DECRYPTION.txt
017b6631f3b74ff29c9568b8cc6eb8897a5f3dc39a1d24754a5e234b3456e253
02f01035f98666763e1534cce94f9c56497677e974d751dcab3d6d67d7eef22d
02f29650d394cccfbb2d9d4b05a0d7ed733da03b9859054f47ef6595ec03c3a0
04f2606dca523f464c4bb6dd9e179ec1d4d889149da876ce1bf52725e0d01000
07631e96b95b1f01bdc591699ae6bc2e6787387cbe865bc11004bd34c0f9c3a4
081ee9a47dd62fc379127ace03ac388e60c682385dbe573d18ff1836c27e73b8
084f828fc318863adb8dc98d97bc5fd11b5770971afc97fe3315c3cc348d9a56
08f8ae7f25949a742c7896cb76e37fb88c6a7a32398693ec6c2b3d9b488114be
0b83f2667abff814bb724808c404396e6ad417591165f1762a8e99ec108d4996
0c6e3880040d8f84fc5d05b09da177f7b604296d2ab32c0210df131868ffa30b
0c87bf46296acfff7d728a68fe6dad3a9217addf3a8c7e63ce3cb94f0fd91fce
0e1aa16302bc6aba5e40214a43cf2b992b7a093da859a8c5c337cb7c40c2755a
120d2046c5a85b93e90975784cd1c18ae80624734942502c363b18790c49b751
136d05b5132adafc4c7616cd6902700de59f3f326c6931eb6b2f3b1f458c7457
1395611a07160027687c98c88558f6a55e6af86b4941082f3336f94953b3f840
1491ebbbf7ec7faaeb1e3e22ef9da869c4be551a6138b32ca14ce7950ea26f91
15c79a1339cbdb7c980a95e9355efe40470e61599d558aa98824c782d3badf34
1dea642abe3e27fd91c3db4e0293fb1f7510e14aed73e4ea36bf7299fd8e6506
235bf3683d025222351713495ce34c81234cd8733008032534dd012953d9c36a
242dea91b65d00424ccbe96507bca040286fd38db33a7fb365e6bdde3de1570c
2aafc4ee5edb0dd956cbdfbd9c11a23e2e61102986b6428e3e27eeb09e0fba74
2bb72adac98072e7eb5a7048a4e77fcad943266c63e6821bfbb5050e3e85a093
2ddcd55be2d6d73b87db387ce70ce5dbc69b895b0c37c80b75f8ce60fb969165
2e96b55980a827011a7e0784ab95dcee53958a1bb19f5397080a434041bbeeea
30f2fe10229863c57d9aab97ec8b7a157ad3ff9ab0b2110bbb4859694b56923f
32245985e3955418affee6d05d11d541aff9babfbde7e15fb80c185a313dd287
3dc5226416aa840b4163534ef7ebbf7b378badb98f985e998a3eca0685855e47
3f4707ad6ca47807ba35241c36708fb07b7ede6eb0108c1a7d4a9239d51dde45
4127e3d1739142a8e56e3afb4d9597abd395efbc77d28a7fa468de29da6420ff
4355ded7fd81b1694e9eb53a1283506eaae091cc34269e8eedda092a91e39165
439aca5fdcc03516b1897d90734fe66914a202adb5b4913767142443cef2f8ba
454431e215b56e605a617d7df70503771824cdaeeeb28b9d5ff4eed381c43a7d
480fb2f6bcb1f394dc171ecbce88b9fa64df1491ec65859ee108f2e787b26e03
4a6f8bf2b989fa60daa6c720b2d388651dd8e4c60d0be04aaed4de0c3c064c8f
4af995c39c9ffa3397127cdd51ed62c6424996030c7b2987a290f1cd35edc08d
4d403d570837bb7499c7e8420cc3349e3a33c21ab7bcdbb88c94dbd1850c28ef
4ecd1c599cd739a38e4cdd8c55f7e9c58df360ef51b4ab8b00ce4dbcbbaf559b
4ee897dba5f4413da379d4282b4e6b902f8da355b550f937aef9510c964cf01d
500d730c0f90e7ee321bacd615252811b3ddb7b3e220dbc4b145a61cd50b07b2
51bbf3f7b599abb77bf42662b9d3b7b7e756c9b6a051296a56b7aa680afe4487
52a55dda31f26a9798b32c03d9fecd4a4a4f8bf46bf0e047110eeaf6ee889691
5406fc722631a8146e53bb4604e57305035f3360dd58ee549ace438d67c2551d
549a883cb3d923eb0b45248d6f46bd2859a3265f203e6019f3e4b9df6c9f9813
559b2317fc7c5aaeb642170a0d3857bb6792f505c4dcfaecc4d0edb38c7c0987
5f660ac49e4b3dcdc68197f3a9a907c6813d474272da00a6be9da2da6cf05d91
602677d62414c54646adb1e9d2fd6ee44ac5d766c55c573be8e789d6cbc182eb
6139aa57b4c8b8d6039d9293e9eb99a37a9183183d6461a256a77862ba30cdff
6324da256428b3e2fd88b424a774181207fbea8473b7ac79c41243c45a8bf2b2
6665c2067ba4cfd451f15fc77d13d32a5d4132e2cf70d08398e93ebd6b83f07a
67033951e35e47f847e991b3c2e659a5a1f0f668f4d6a3f92bdfeda184559292
6834d04bb7711a245f7d3d44e342a68c7a9c39a4a563d3232ad99687a2f1fdf2
702bcd7619ab4a88ce81b926754fd14cee1a921ca9f9b7d7a62fcc4d34674b28
714da26fa6f34a5dbb883e9814f60db0a4f673812c347cb3ac6572982a485b5f
75975b0c890f804dab19f68d7072f8c04c5fe5162d2a4199448fc0e1ad03690b
760b1e2d9f509b4b8e22815ca837491a18fa144a59b5dc4bf84a33d2856ac03d
765e19592dff8ea07f63163ba59f02769ff04f2aff759d43ae8830acd57b08ee
7929eddeaeefb0880cffd80bc3b1c3e961c47245b91c771c45ac87e16d410038
7ae4c5caf6cda7fa8862f64a74bd7f821b50d855d6403bde7bcbd7398b2c7d99
7ca6e383349618e440117ed4b36366a42c2fd75f0a3bdd0be3138fc9964cf836
7d62d0819aba321d4e619c9a5974c088ea81d35ae6bde3d8f6bf36fd88db73d0
816244dfaa8d9bd89e0c7cb0c96152502a2f89ea703ce3dc6e8c0db24ead2f64
8814af2fa40ae55647286717e75ea2dcd8cc0b5910114a237bd9ea0c8206f62e
8816bf5056a42f20cdd42209bf7553be1bd6d41eef6562976afcddde37b0abff
8c9e4aef639e537fe895d297e8eecf647a172650d7064da947f2acfa1712b919
8d9f0e1d3faad8d7cfe83cd07750a78af671d0933e11a4854f4c3176b7687d77
8f8ce3e99d843a4beb1d3d961a7cab27e75e32490132464e448bdbcd97ddcfd5
8ffe8427e86e8abdde4ded4fbf1204864a8a064ad66556b638f6a2c0b915de80
939ac65f6ecf906d6eefeaeb11fbb1bd05515d51b2dc252fa23d6d5721fa7254
94a490ad313f505fffeb08c0ea85ebee3b14ef6b1d2f26524a50f6f85b5fdf8b
9ab353d50d8fb366cb898ffaba2a71b1ae772475d1ad550232d6416b15fd3b54
9b3d9d00c64d1a1fc09e76604e97e55ff804f4a243cb856a45fc05bf0f3869a7
9bafc646f2105c3ad37d2f3c7ce63067c581229be9c99d28bb0df39c14e93558
9c16211296f88e12538792124b62eb00830d0961e9ab24b825edb61bda8f564f
a15d1311e02cffd67a0db25cb0d6b2ccd3fc457d0bd76d7d2a4a462bbad6356a
a1eeeeae0eb365ff9a00717846c4806785d55ed20f3f5cbf71cf6710d7913c51
a657c69bf3969600caabda76ccdb943900c0a8645bb5bac4de4f62d27b83d758
a85a7a79c1ea664f6d469b17247254cad0f279bab1ee424832c7d0d9e00d087a
a9a4843ea9af569ab5ffd213ac4910898019083eb74ff8f36678092daca92f2e
ab605e4dbfd4cdd565a25cf182803d110626a2bcd756575253604449b718b7bf
ae67c06de35d95d0866ced2938bc699be365fd303b1c9aef74fc31243ee9eb3c
b0aa1c2da68c3bc4f4658917edd7cf1cef2692ee10f5ef3fb68b0981e32bd9b9
b0c75e92e1fe98715f90b29475de998d0c8c50ca80ce1c141fc09d10a7b8e7ee
b2596c9e6d081790d2709d00d163a23f737f4d4519321603c04dd2dba7c894e2
b2e16bd8b729fe69884210cc60194cba88d261d2b75f248e7996b2c009caba1f
b2f855e31e0597f799551a96705e24ecc95ed4bc82db788a93e0f1bead76bac4
b5fa88716c8f3d247eebb8d48f4c7d9541ac4810bd2557a82d5f37ec489b2170
b600e06f14e29b03f0b1456723a430b5024816518d704a831dde2dc9597ce9c9
b68f469ed8d9deea15af325efc1a56ca8cb5c2b42f2423837a51160456ce0db5
b955ce4219c9c2e4f93309d0075619969b438ece31bf93dc67ff6e8a267707ca
b976b5836f5276a64ba4641cee348f65a13c4e4aa513896c30f668f08bc69c83
bb28adc32ff1b9dcfaac6b7017b4896d2807b48080f9e6720afde3f89d69676c
bf6fa9b06115a8a4ff3982427ddc12215bd1a3d759ac84895b5fb66eaa568bff
bfb23ec9f0983a4a3a9da00b47782b7cfed25105854d255483108690ec20b039
c3c77f6f43c24ce810a71f6a3174c5de6e8be398479e5f8207e94c802890cf7c
c634378691a675acbf57e611b220e676eb19aa190f617c41a56f43ac48ae14c7
c71ce482cf50d59c92cfb1eae560711d47600541b2835182d6e46e0de302ca6c
cd4806064b0032bf2dc8f9657cb5ca8697c6ffbfe03ee9d174dafc92d16a6f13
cfbcf827900a5dc36d1d2ba4b4879ce703a429b1952e6e9616f498a9bde68c91
d0e1a5378a4088b26fc5ed4e463ddce940b3d468e83c66f78bdd0fe68dff1b13
d133283a7a250b316b30d54178a0d4831a6553a0086499d1f4e96d82bf0945ec
d52d2593339867efb323e3625d1ac472c0c33ee5074ff6e2de80a853a519d39b
d5c3f5f3b905e136ccd0f0842938cd6d98462d0c3d75634f40cbc66c9abe28b8
d6cd0080d401be8a91a55b006795701680073df8cd7a0b5bc54e314370549dc4
d7fe920929797c83862c796b9b1c5bb00445af2bef761fef2fed71a72dc91665
d8fab196936a0daa26227517ecaed5ee4cfc6cb4b95b258f810bf55a98b1856a
dbaad6bfb01bb635a91f405692c171d1c3e21e412f4382d9eefd72cf99522dd6
dc6c80ff7db086955319aa4f299dba197881d38a1d12a56077dc65fcab5b48ad
dcd8e351c41a5ac740d87af169859dee0be044fda28e86393d507b6d38b4dd97
e0248667a64b3e8622819f3a9c14e2eef420781500bf3377790ba60563b344fa
e160d7d21c917344f010e58dcfc1e19bec6297c294647a06ce60efc7420d3b13
e1aa4f6d49f484f9ea3191d2c3ee90d6cad7dcaf4fe2b39e07c28796dbc30fae
e67d3682910cf1e7ece356860179ada8e847637a86c1e5f6898c48c956f04590
eab758190c00f3a3a1e441d9f6aa9a085586bce19ddf1a8d77d2fd9dd2a912b3
ed6cf30ee11b169a65c2a27c4178c5a07ff3515daa339033bf83041faa6f49c1
f82f8739be63b572e7972628baeaa4b5b1e6812ef82eb98acd3496a3f9bb0e64
f88ee0e2bbd134fbb3f41a9133c91e609d0e1b9db7803e1e7fb577c580308a63
f8c80bc35775ff5572ccfffe57d25cbb4a505821a079242557fdee2cb189b8e3
fbf2fdbbebbf95b5642617ba57313b0a4b3b297e655d9f47b39793956f832e77
ff15866b14cd3c5c30ebd697c236764c17760816d88db1125bf0497996b63413
fffcb425afadb6d3e7042089be547a873ec94e3bae2b1970ac9ef79aa1f9ba04
Industry Sector Pays Extortion Date Amount (USD)
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
UnknownUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
UnknownUnknown
UnknownBrazil
IndividualUnknown
IndividualUnknown $1,800
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnited Kingdom
IndividualTürkiye
IndividualUnknown 0.15 BTC($4,282)
IndividualUnknown
IndividualUnknown
IndividualSweden
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
UnknownUnknown
IndividualUnknown
Engineering ServicesUnknown $150,000
Engineering ServicesUnknown $150,000
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
UnknownUnknown
UnknownUnknown
IndividualUnknown
IndividualUnknown
IndividualUnknown
IndividualUnited Kingdom $500
UnknownUnknown 0.4 BTC($27,749)
UnknownUnknown
ASEC: Trigona Ransomware Threat Actor Uses Mimic Ransomware
BleepingComputer Forums: .1000 USD Ransomware (N3ww4v3/Mimic)
BleepingComputer Forums: Can´t identify ransomeware (N3ww4v3/Mimic)
BleepingComputer Forums: got infected with randsomware (N3ww4v3/Mimic)
BleepingComputer Forums: Help identifying unknown ransomware (N3ww4v3/Mimic)
BleepingComputer Forums: Help in the unknown reansomware
BleepingComputer Forums: N3ww4v3/Mimic Ransomware (.n3ww4v3; [random 5-15 char]) Support Topic
BleepingComputer Forums: Unidentified extension en2v5k1e (N3ww4v3/Mimic)
BleepingComputer Forums: unknown ransomeware (N3ww4v3/Mimic Ransomware)
BleepingComputer Forums: what ransomware is it? (N3ww4v3/Mimic)
ESET Forums: Need help identifying this ransomware
Hatching Triage: Hatching Triage - Mimic
Reddit: N3ww4v3/Mimic Ransomware Attack
Securonix: NEW RE#TURGENCE ATTACK CAMPAIGN: TURKISH HACKERS TARGET MSSQL SERVERS TO DELIVE…
Securonix: THREAT ACTORS TARGET MSSQL SERVERS IN DB#JAMMER TO DELIVER FREEWORLD RANSOMWARE
The Crypto-Ransomware Digest: N3ww4v3 Ransomware
Trend Micro: New Mimic Ransomware Abuses Everything APIs for its Encryption Process
VALHALLA: MAL_RANSOM_Mimic_Jan23
Ransomware Tracker