SHA256 Detection name 8d2581e5cc6e6fdf17558afe025ff84d9023ea636aca74dee39900d8f523e912 Ransom.Win64.BLACKBYTE.YABJM 91f8592c7e8a3091273f0ccbfe34b2586c5998f7de63130050cb8ed36b4eec3e Ransom.Win32.BLACKBYTE.YABJY.note 388163c9ec1458c779849db891e17efb16a941ca598c4c3ac3a50a77086beb69 Ransom.Win64.BLACKBYTE.YABJE 3de8fe5cee8180e93697e4ddca87e721910b9dd922de849cab7b1b3a50e54a00 Ransom.Win64.BLACKBYTE.YPBJE 884e96a75dc568075e845ccac2d4b4ccec68017e6ef258c7c03da8c88a59753 Ransom.JS.BLACKBYTE.AA ------ URLs ------ http://45.9.148.114/forest.png http://185.93.6.31/mountain.png