Last Seen: 2026-10-04
-1391882038 | 2026-10-04T23:03:23
-757264002 | 2026-09-25T21:37:38
-1166656618 | 2026-10-03T18:09:59
-320559769 | 2026-09-26T10:42:00
Remote Desktop Protocol
Remote Desktop Protocol \x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x1f\x08\x00\x02\x00\x00\x00 Remote Desktop Protocol NTLM Info: OS: Windows Server 2022 OS Build: 10.0.20348 Target Name: VMI2477836 NetBIOS Domain Name: VMI2477836 NetBIOS Computer Name: VMI2477836 DNS Domain Name: vmi2477836 FQDN: vmi2477836 Redeemer Ransomware - Your Data Is Encrypted 8888888b. 888 888 Y88b pores) 888 888 888 888 d88P .d88b. .d88888 .d88b. .d88b. 88888b.d88b. .d88b. 888d888 8888888P d8P Y8b d88 888 d8P Y8b d8P Y8b 888 888 88b d8P Y8b 888P 888 T88b 88888888 888 888 88888888 88888888 888 888 888 88888888 888 888 T88b Y8b. Y88b 888 Y8b. Y8b. 888 888 888Y8b. 888 888 T88b Y8888 Y88888 Y8888 YS8888 888 888 888 Y8888 888 Made by Cerebrate Visit the official Redeemer Ransomware Tor website - redeemergd6qjtzgiuf5jgpkk6i3xybkhsldzjoyjaxivyzinhvmzcad.onion (Question 1 What happened to my computer2 I cannot access my files and they have changed their extension2 Answer 1) Your files have been encrypted by Redeemer, a Darknet ransomware operation. (Question 2) Is there any way to recover my files Answer 2 Yes, you can recover your files. This will however cost you money in Monero (XMR). (Question 3 Is there any way to recover my files without paying Answer 3) Without paying for the proper decryption key, you will NEVER regain access to your files. Redeemer uses the most secure algorithms and a sophisticated encryption scheme which guarantees security. Ever since Redeemer was first released publicly (vMay 2021) no one managed to crack the decryption or recover their files without paying.
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c8:9b:0a:4d:16:3e:9c:44:bd:66:7d:5a:4a:43:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=vmi2477836
Validity
Not Before: May 24 14:19:11 2026 GMT
Not After : Nov 23 14:19:11 2026 GMT
Subject: CN=vmi2477836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
c4:ae:44:89:97:20:30:49:db:44:e7:fc:51:24:a4:0a:
b0:d1:c7:0a:59:b1:27:6c:0e:2b:40:f5:ad:7b:4d:83:
72:6b:c1:64:8c:3d:25:87:3b:3c:ba:5c:84:11:30:e3:
ee:21:99:06:7f:ca:e5:3a:0d:2b:7e:b9:bf:8a:88:75:
a9:e7:a0:a5:3d:eb:ea:63:85:98:ff:c9:ae:e8:67:cb:
80:5e:3d:77:54:6b:95:48:b8:19:7e:26:10:f0:10:3c:
24:24:e2:87:7a:2c:8a:00:88:04:bf:97:4e:0c:a9:3b:
44:4e:15:50:ab:ee:4d:58:06:0b:c9:a9:cb:34:8a:21:
ff:07:b3:3e:67:a1:06:6e:34:95:85:1f:23:4c:79:71:
0c:c0:bd:c6:9e:e5:c1:34:84:ff:c9:b9:1c:16:e4:91:
0e:5a:c8:32:3a:71:f8:6c:68:66:42:6e:7c:b9:26:18:
28:ec:37:e4:eb:3e:6e:be:77:0e:07:58:4e:9d:f7:65:
e9:84:d6:18:96:bf:4c:99:c2:bb:71:85:01:22:6e:b3:
5d:a4:4f:55:8b:1c:dc:9a:e5:18:47:3d:32:17:fc:17:
85:36:e1:df:a2:e6:3a:80:9f:92:88:63:7b:05:ee:3c:
53:66:ff:2f:61:30:fd:1a:1f:32:93:a7:93:73:ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Key Usage:
Key Encipherment, Data Encipherment
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
47:8e:06:71:f3:e3:33:59:5a:1c:53:a7:5a:94:ac:67:de:59:09:b8:26:8c:6f:62:
e4:64:c7:a8:f9:b3:13:85:95:20:bf:7a:5e:61:d3:91:8f:92:6c:3f:b9:34:7e:e7:
c2:90:70:53:e5:13:b2:66:83:fe:a6:09:b3:c2:91:f1:0a:dd:aa:f9:7c:d0:8c:19:
17:f6:ff:38:53:fd:37:2f:06:51:93:57:89:70:40:24:0d:88:29:46:99:ac:61:61:
05:c0:f8:6e:af:82:19:00:76:0d:d6:5e:9c:ea:a2:82:dc:d1:ae:bc:eb:8d:71:69:
f7:7e:87:c4:f7:71:f9:d0:12:d4:86:1a:32:b8:57:49:93:51:d3:dd:de:02:3f:5b:
58:46:e5:e0:70:c2:14:fe:f4:e0:29:96:d6:06:ba:86:c8:88:40:58:7c:3b:3c:fe:
c5:a0:ce:45:9e:97:ab:d6:fd:88:b2:77:f1:81:2f:0b:95:4f:e9:7c:1c:68:b0:40:
3f:f4:04:68:c6:de:07:ba:7f:5c:90:b2:a1:90:c2:97:a0:14:83:91:e2:fb:cf:fa:
e7:4f:8f:c8:56:61:7b:fb:e8:3b:3d:b2:39:e3:ad:81:55:a7:b2:25:ce:2e:5b:f9:
9f:27:c0:19:31:3f:0b:f0:ce:b0:7c:c3:fc:7d:a8:ca