[Emerging-Sigs] EverBe 2.0

[Travis Green]

I've had a look at 3-4 md5's, there appears to be no network component
to this ransomware.

-T

On Wed, Apr 3, 2019 at 2:06 PM Alan Knox <alan2308a at gmail.com> wrote:
>
> Right now no, I don't have anything other than several machines were infected and management is asking whether or not there were any signatures in place. A search of the signatures didn't turn up anything but I figured I'd at least ask.
>
> Thanks,
>
>
> Alan
>
> -----Original Message-----
> From: Travis Green <tgreen at emergingthreats.net>
> Sent: Wednesday, April 3, 2019 1:02 PM
> To: Alan Knox <alan2308a at gmail.com>
> Cc: Emerging-sigs at emergingthreats.net
> Subject: Re: [Emerging-Sigs] EverBe 2.0
>
> A quick google search has revealed no file hashes. Do you have any
> further info with regard to how this was delivered or if it performed
> any network activity after infection?
>
> -Travis
>
> On Wed, Apr 3, 2019 at 10:53 AM Alan Knox <alan2308a at gmail.com> wrote:
> >
> > One of our sites just got hit by EverBe 2.0.  Are there any signatures for this malware? I’m getting a lot of questions about this and I didn’t see any.
> >
> > _______________________________________________
> > Emerging-sigs mailing list
> > Emerging-sigs at lists.emergingthreats.net
> > https://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
> >
> > Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreats.net
> >
>
>
> --
> PGP:
> travisgreen.net/tgreen at emergingthreats.net.asc
> travisgreen.net/travis at travisgreen.net.asc
>


-- 
PGP:
travisgreen.net/tgreen at emergingthreats.net.asc
travisgreen.net/travis at travisgreen.net.asc