Pornoplayer ransomware updated: Mystic Compressor

Another update regarding the pornoplayer ransomware.

Samples of yesterday and today seem unknown for most of AV according to VirusTotal (Result of the dropper) ~ Result of the ransom dropped

Nothing have really changed until the twice packer.

The dropper and the ransomware dropped are now packed with Mystic Compressor.

A compressor know for pack rogues and Zbot.

Dropper:

Dropped ransomware:

Code to unlock:

See also ~ http://xylibox.blogspot.com/2011/03/trojanransom-pornoplayerexe_05.html