Home Malware Programs Ransomware LeChiffre Ransomware

LeChiffre Ransomware

Posted: January 25, 2016

Threat Metric

Threat Level: 10/10
Infected PCs: 10
First Seen: January 25, 2016
OS(es) Affected: Windows

The LeChiffre Ransomware is a new type of ransomware that has been troubling businesses across the world for some time. Just like other ransomware threats, the LeChiffre Ransomware also works by encrypting the user's files and offering to decrypt them in exchange for a hefty amount of money. However, there are several peculiar things about the LeChiffre Ransomware that make this threat more unique than your typical ransomware. The LeChiffre Ransomware isn't fully automated – the ransomware must be run manually on the victim's computer, and the LeChiffre Ransomware can't be spread automatically via infected machines. In short, the attackers must have physical or remote access to the victim's computer if they want to encrypt the victim's files with the help of the LeChiffre Ransomware.

The LeChiffre Ransomware utilizes a secure RSA 1024 + AES encryption that makes it nearly impossible to decrypt the files that have been encrypted by the LeChiffre Ransomware. As soon as the LeChiffre Ransomware is done with the encryption, it displays a ransom note which tells the victim to get in touch with the attackers via an e-mail message. According to the ransom note, users can send a sample file to be decrypted by the cyber crooks, a method often used by ransomware authors to assure their victims that all their files can be restored if they pay the ransom fee. The ransom fee requested by LeChiffre ransomware is around 1 BTC (~$350) and, according to the ransomware's authors, users who pay the ransom fee will have their files decrypted immediately. Although this may seem like a quick solution to the issue, we advise you not to pay any money to the people who got you to this annoying situation. Instead, you should remove the LeChiffre ransomware with a reputable anti-malware solution, and attempt to restore your files with the help of free tools and utilities that are commonly used to restore files encrypted by ransomware.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



dir\name File name: name
Size: 530.94 KB (530944 bytes)
MD5: 4523ccfd191dcceeae8e884f82f5c7ad
Detection count: 8
Path: dir
Group: Malware file
Last Updated: January 27, 2016
Loading...