Hip1 Ransomware Appends Complex Extension
Hip1 is the name of a new ransomware variant that was spotted in the wild in late August 2022. The new strain belongs to the family of VoidCrypt clones.
Hip1 will encrypt the system it is deployed on and leave most files on it in an unusable state. Encrypted files receive a complex, multi-part extension, as is the case with other VoidCrypt clones.
Encrypted files will get a new extension consisting of the victim's ID, the contact email used by the ransomware operator and the ".HIP1" string. This will transform a file named "photograph.jpg" into "photograph.jpg[ID=alphanumeric string-Mail=FreedomTeam@mail.ee].HIP1" once it has been encrypted.
The ransomware will scramble most documents, archive files, databases and media files.
The ransom note is deposited inside a file named "Read_Me!_.txt" and goes as follows:
All Your Files Encrypted And Sensitive Data Downloaded (Financial Documents,Contracts,Invoices etc.. ).
To Get Decryption Tools You Should Buy Our Decrption Tools And Then We Will Send You Decryption Tools And Delete Your Sensitive Data From Our Servers.
If Payment Is Not Made We have to Publish Your Sensitive Data If Necessary Sell Them And Send Them To Your Competitors And After A While Our Servers Will Remove Your Decrypion Keys From Servers.
Your Files Encrypted With Strongest Encryption Algorithm So Without Our Decryption Tools Nobody Can't Help You So Do Not Waste Your Time In Vain!
Your ID: -
Email Address: FreedomTeam at mail dot ee
In Case Of Problem With First Email Write Us E-mail At : Freedom29 at Tutanota dot com
Send Your ID In Email And Check Spam Folder.
This Is Just Business To Get Benefits, If Do Not Contact Us After 48 Hours Decryption Price Will x2.
What Guarantee Do We Give You ?
You Should Send Some Encrypted Files To Us For Decryption Test.
----------------------------------------------------------------------
Attention!
Do Not Edit Or Rename Encrypted Files.
Do Not Try To Decrypt Files By Third-Party Or Data Recovery Softwares It May Damage Files.
In Case Of Trying To Decrypt Files With Third-Party Sofwares,This May Make The Decryption Harder So Prices Will Be Rise.
----------------------------------------------------------------------
How To Buy Bitcoin :
Buy Bitcoin Instructions At LocalBitcoins :
hxxps://localbitcoins.com/guides/how-to-buy-bitcoins
Buy Bitcoin Instructions At Coindesk And Get More Info By Searching At Google :
hxxps://www.coindesk.com/learn/how-can-i-buy-bitcoin/
