DoppelPaymer ransomware is fathered from BitPaymer ransomware. It encrypts user data using a combination of AES-256 and RSA-2048 algorithms and then requires a ransom of in Bitcoins o return the files. It added
.locked extension to the encrypted files. Recent vitims of DoppelPaymer is The City of Torrance of the Los Angeles metropolitan area, California. The attackers are demanding 100 BTC roughly $685688 in order to not publicize files and return back the 200 GB of encrypted files. Previously DoppelPaymer attacked the Mexico's Pemex Oil in November 2019 where they demanded a $4.9 million in ransom.
DoppelPaymer Ransomware Signatures
Family: Trojan:Win32/Emotet
MD5: 9141d1d189afc2e300121e71a211c925
SHA256: 801b04a1504f167c25f568f8d7cbac13bdde6440a609d0dcd64ebe225c197f9b
DoppelPaymer Ransomware Download
