Lorenz

Compare

Parsing: enabled

Description

Tesorion describes Lorenz as a ransomware with design and implementation flaws, leading to impossible decryption with tools provided by the attackers. A free decryptor for 2021 versions was made available via the NoMoreRansom initiative. A new version of the malware was discovered in March 2022, for which again was provided a free decryptor, while the ransomware operators are not able to provide tools to decrypt affected files.

External Analysis9

External Analysis
https://www.zdnet.com/article/lorenz-ransomware-attack-victims-can-now-retrieve-their-files-for-free-with-this-decryption-tool
https://www.cybertalk.org/the-worst-outcomes-lorenz-ransomware-a-new-double-extortion-strategy
https://arcticwolf.com/resources/blog/lorenz-ransomware-chiseling-in/
https://therecord.media/free-decrypter-available-for-lorenz-ransomware/
https://twitter.com/AltShiftPrtScn/status/1423190900516302860?s=20
https://www.bleepingcomputer.com/news/security/meet-lorenz-a-new-ransomware-gang-targeting-the-enterprise/
https://www.cybereason.com/blog/cybereason-vs.-lorenz-ransomware
https://www.tesorion.nl/en/posts/lorenz-ransomware-analysis-and-a-free-decryptor/
https://www.tesorion.nl/en/posts/lorenz-ransomware-rebound-corruption-and-irrecoverable-files/

Ransom notes2

View all notes

Urls2

Url	Status	Screen	Uptime 30d	Health
http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/	Down		0%
http://woe2suafeg6ehxivgvvn4nh6ectbdhdqgc4vzph27mmyn7rjf2c52jid.onion	Down		0%

Chat servers2

Url	Status	Screen	Uptime 30d	Health
http://lorenzedzyzyjhzxvlcv347n5piltxamo755pzqpozh5l47kj7mxueid.onion/	Down		0%
http://lorenzezzwvtk3y24wfph4jpho27grrctqvf6yvld7256rnoz7yg2eid.onion/	Down		0%

Activity (interactive) 98

Posts98

Date	Title	Description	Screen
2023-12-11	Bayer Heritage Federal Credit Union
2023-11-15	EOS
2023-11-09	Koh Brothers
2023-11-09	Cogdell Memorial Hospital
2023-11-07	Truck Bodies & Equipment International
2023-10-25	Broad River Retail/Ashley Store
2023-10-02	AllCare Pharmacy
2023-09-12	BF&S Civil Engineers
2023-09-12	Dee Sign
2023-08-30	Felling Trailers, Inc.
2023-04-05	Tarolli, Sundheim, Covell & Tummino LLP
2023-04-05	Joy Cone Co, Joy Baking group, BoDeans Baking, Altesa
2023-04-05	NGS Super
2023-04-05	Intrasect Technologies
2023-04-05	Moore Engineering
2023-03-14	Manning Building Supplies
2023-03-14	Tarolli
2023-02-20	Hopsteiner
2023-02-06	AmerisourceBergen/Censora - MWI Animal Health
2023-01-10	Chestertons Inc.
2023-01-10	Thor Specialties, Inc.
2023-01-10	Shelco
2022-12-07	Albina Asphalt
2022-11-30	Holler-Classic
2022-11-14	Nissan of Las Cruces
2022-11-14	Salud Family Health
2022-11-10	Main & Main Capital Group
2022-10-27	Miracapo pizza company
2022-10-18	Wes-tec inc.
2022-09-17	Turner Enterprises, Inc.
2022-09-17	Ward Hadaway
2022-09-17	Northern Contours Inc.
2022-09-17	Laddawn Inc.
2022-08-23	Engine Power
2022-08-22	Northern Contours
2022-08-18	Airtech
2022-08-18	Tygavac
2022-08-18	Wolfe Eye Clinic
2022-08-18	Challenge-mfg
2022-08-18	Turner Enterprises
2022-08-18	Hensoldt
2022-08-18	VadaTech
2022-08-18	Wardhadaway
2022-08-18	DeeZee
2022-08-18	Musco
2022-08-18	Tosoh
2022-08-18	Brunk
2022-08-18	Fuji
2022-08-18	Bonneville
2022-08-18	Wis-Pak
2022-08-18	Biothane
2022-07-28	Fandeli
2022-07-13	Van Ausdall & Farrar, inc
2022-07-13	Biothane usa
2022-07-13	Gresco
2022-07-11	Uppco
2022-07-05	Wis-Pak, Inc
2022-07-02	Bonneville Collections
2022-05-31	Westwood
2022-05-30	Fuji America Corporation
2022-05-26	Mebulbs
2022-05-19	Magtek
2022-05-16	Brunk Industries Inc.
2022-05-16	AmCham Shanghai
2022-05-05	Tosoh Corporation
2022-05-04	Tosoh Bioscience
2022-04-21	Morrie's Auto Group
2022-04-14	Musco Sports Lighting
2022-04-13	Simply Placed
2022-04-12	DeeZee
2022-04-11	Advizrs
2022-04-06	Keicorp(ICPM)
2022-03-29	Biz Retek
2022-03-15	Fuji America Corporation
2022-03-15	VadaTech
2022-03-15	Ward Hadaway
2022-01-11	Hensoldt
2021-12-29	Buchanan Hauling & Rigging
2021-12-23	Turner Enterprises, Inc.
2021-12-14	Kenall/Legrand
2021-11-15	Component Assembly Systems
2021-09-21	SCREEN Holdings
2021-08-10	Sebastian
2021-07-29	Miller-Valentine Group
2021-07-27	MPS Credit Union
2021-06-24	Buchanan Hauling & Rigging
2021-06-01	Langs Building Supplies Pty Ltd
2021-05-11	Challenge Manufacturing Company
2021-04-29	Airtech Advanced Materials Group
2021-04-13	DNS Toptech
2021-04-11	Joy Cone
2021-04-01	Wolfe Eye Clinic
2021-04-01	Bases Conversion and Development Authority (BCDA)
2021-04-01	Tygavac ltd.
2021-02-11	The managementtrust
2021-01-10	Multifeeder
2020-12-20	Commport Communications
2020-01-12	Windemuller