deadbolt[.]pidDomain

Reported by 1 independent source · first reported 19 Oct 2022 by Group-IB · last reported 19 Oct 2022

Last reported 4 years ago

What the reports say

1 report, newest first · the exact sentence from each

“The start of the decryption process is dependent on the contents of the file /tmp/deadbolt[.]pid, the end of the decryption process is based on the contents of the file /tmp/deadbolt.finish, and the current number of decrypted files is stored in the file /tmp/deadbolt.status.”

Group-IBVendor19 Oct 2022
Deadbolt ransomware decryption: unlock your data

named in the same reports

Copy this indicator · defanged

1 indicator, defanged, one per line

rand[.]read

Also named with it: CVE-2022-27593

Thanks — we review every report.

Report a wrong value