Vendetta Ransomware encrypts user data with AES, and then requires a ransom in BTC to return files. .vendetta .VENDETTA and .vendetta2 extensions are added to the encrypted files.
Encrypted files are renamed beyond recognition. An example of an encrypted file:
01-3F-F3-3C-6B-E0-16-F1-70-BA-45-23-FD-5C-DF-0F.vendetta
01-3F-F3-3C-6B-E0-16 -F1-70-BA-45-23-FD-5C-DF-0F.VENDETTA
Vendetta Ransomware Signatures
Family: Win32:Malware-gen
MD5: 8be3cc8a946f22423045771020654891
SHA256: d3991bcb53933f3c8555f9aeb1a136c76d976b6cf180b57225b999971a12ab01
Vendetta Ransomware Download