Trusted Design

TeslaCrypt 2.0: Cyber Crime Malware Behavior

概要

TeslaCrypt/AlphaCrypt uses AES256 encryption. The AES key is generated using a SHA256 hash and due to the keys being stored on the infected machine, victims in many cases could likely decrypt files without paying the ransom. • The newest variant, TeslaCrypt 2.0, uses the same encryption algorithm; however, the keys and other configuration data are stored in the Windows Registry instead of a file on the local disk (as in previous versions). This version masquerades as CryptoWall. • The command and control (C&C) communications for new variants use the same AES256 encryption for any traffic to the attacker’s server; in previous variants, only Base64 encoding was used.

Created: 2026-02-23

Indicators

• domain - fgainterests.com -
• domain - ledshoppen.nl -
• domain - teenpornotube.org -
• domain - shmetterheath.ru -
• domain - serenitynowbooksandgifts.com -
• domain - ezglobalmarketing.com -

類似Pulses

• NUCLEAR EK FROM 162.247.14.156 SENDS TESLACRYPT 2.0 (score: 0.92)
• Threat Spotlight: TeslaCrypt (score: 0.73)
• TeslaCrypt Ransomware (score: 0.72)
• TeslaCrypt C2 Communication (score: 0.72)
• New TeslaCrypt version (score: 0.67)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る