Malicious IP addresses (e.g., 178.170.219.108 ). Mitigation & Recovery

Locations of the ransomware binary or ransom notes.

Briefly define Eris as a ransomware-type virus that renames files (e.g., adding .ERIS or .TABGH extensions) and creates a ransom note called @ READ ME TO RECOVER FILES @.txt .

Document any communication with Command and Control (C2) servers to transmit encryption keys or receive instructions. Indicators of Compromise (IoC)

Eris.rar -

Malicious IP addresses (e.g., 178.170.219.108 ). Mitigation & Recovery

Locations of the ransomware binary or ransom notes.

Briefly define Eris as a ransomware-type virus that renames files (e.g., adding .ERIS or .TABGH extensions) and creates a ransom note called @ READ ME TO RECOVER FILES @.txt .

Document any communication with Command and Control (C2) servers to transmit encryption keys or receive instructions. Indicators of Compromise (IoC)

If you would like to contribute to new WinEpi, you can Contact us and indicate that you want to be included in the Contributors database

These institutions and companies support WinEpi project: