I am not sure if anyone has seen this variant before because I could not find anything on ID ransomware page or searching the forums. The files have the extension .dll. The ransom was paid and a ".config" file was given which looks like a list of ip addresses. The ransom page says that you will be able to get the decryptor, but I do not see any decryptor. Perhaps someone has seen this before? Sample file: https://www.sendspace.com/file/3unr83 Ransom note : https://www.sendspace.com/file/ywv0gd
Thanks in advance!