Lorenz

Parsing : Enabled

Description

Tesorion describes Lorenz as a ransomware with design and implementation flaws, leading to impossible decryption with tools provided by the attackers. A free decryptor for 2021 versions was made available via the NoMoreRansom initiative. A new version of the malware was discovered in March 2022, for which again was provided a free decryptor, while the ransomware operators are not able to provide tools to decrypt affected files.

External Analysis
https://www.zdnet.com/article/lorenz-ransomware-attack-victims-can-now-retrieve-their-files-for-free-with-this-decryption-tool
https://www.cybertalk.org/the-worst-outcomes-lorenz-ransomware-a-new-double-extortion-strategy
https://arcticwolf.com/resources/blog/lorenz-ransomware-chiseling-in/
https://therecord.media/free-decrypter-available-for-lorenz-ransomware/
https://twitter.com/AltShiftPrtScn/status/1423190900516302860?s=20
https://www.bleepingcomputer.com/news/security/meet-lorenz-a-new-ransomware-gang-targeting-the-enterprise/
https://www.cybereason.com/blog/cybereason-vs.-lorenz-ransomware
https://www.tesorion.nl/en/posts/lorenz-ransomware-analysis-and-a-free-decryptor/
https://www.tesorion.nl/en/posts/lorenz-ransomware-rebound-corruption-and-irrecoverable-files/
Urls
Screen
http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/
Screen
http://woe2suafeg6ehxivgvvn4nh6ectbdhdqgc4vzph27mmyn7rjf2c52jid.onion
File servers
Screen
Chat servers
Screen
http://lorenzedzyzyjhzxvlcv347n5piltxamo755pzqpozh5l47kj7mxueid.onion/
http://lorenzezzwvtk3y24wfph4jpho27grrctqvf6yvld7256rnoz7yg2eid.onion/

Posts

Date Title Description Screen
2023-12-11
Bayer Heritage Federal Credit Union
2023-11-15
EOS
2023-11-09
Koh Brothers
2023-11-09
Cogdell Memorial Hospital
2023-11-07
Truck Bodies & Equipment International
2023-10-25
Broad River Retail/Ashley Store
2023-10-02
AllCare Pharmacy
2023-09-12
BF&S Civil Engineers
2023-09-12
Dee Sign
2023-08-30
Felling Trailers, Inc.
2023-04-05
Tarolli, Sundheim, Covell & Tummino LLP
2023-04-05
Joy Cone Co, Joy Baking group, BoDeans Baking, Altesa
2023-04-05
NGS Super
2023-04-05
Intrasect Technologies
2023-04-05
Moore Engineering
2023-03-14
Manning Building Supplies
2023-03-14
Tarolli
2023-02-20
Hopsteiner
2023-02-06
AmerisourceBergen/Censora - MWI Animal Health
2023-01-10
Chestertons Inc.
2023-01-10
Thor Specialties, Inc.
2023-01-10
Shelco
2022-12-07
Albina Asphalt
2022-11-30
Holler-Classic
2022-11-14
Nissan of Las Cruces
2022-11-14
Salud Family Health
2022-11-10
Main & Main Capital Group
2022-10-27
Miracapo pizza company
2022-10-18
Wes-tec inc.
2022-09-17
Turner Enterprises, Inc.
2022-09-17
Ward Hadaway
2022-09-17
Northern Contours Inc.
2022-09-17
Laddawn Inc.
2022-08-23
Engine Power
2022-08-22
Northern Contours
2022-08-18
Airtech
2022-08-18
Tygavac
2022-08-18
Wolfe Eye Clinic
2022-08-18
Challenge-mfg
2022-08-18
Turner Enterprises
2022-08-18
Hensoldt
2022-08-18
VadaTech
2022-08-18
Wardhadaway
2022-08-18
DeeZee
2022-08-18
Musco
2022-08-18
Tosoh
2022-08-18
Brunk
2022-08-18
Fuji
2022-08-18
Bonneville
2022-08-18
Wis-Pak
2022-08-18
Biothane
2022-07-28
Fandeli
2022-07-13
Van Ausdall & Farrar, inc
2022-07-13
Biothane usa
2022-07-13
Gresco
2022-07-11
Uppco
2022-07-05
Wis-Pak, Inc
2022-07-02
Bonneville Collections
2022-05-31
Westwood
2022-05-30
Fuji America Corporation
2022-05-26
Mebulbs
2022-05-19
Magtek
2022-05-16
Brunk Industries Inc.
2022-05-16
AmCham Shanghai
2022-05-05
Tosoh Corporation
2022-05-04
Tosoh Bioscience
2022-04-21
Morrie's Auto Group
2022-04-14
Musco Sports Lighting
2022-04-13
Simply Placed
2022-04-12
DeeZee
2022-04-11
Advizrs
2022-04-06
Keicorp(ICPM)
2022-03-29
Biz Retek
2022-03-15
Fuji America Corporation
2022-03-15
VadaTech
2022-03-15
Ward Hadaway
2022-01-11
Hensoldt
2021-12-29
Buchanan Hauling & Rigging
2021-12-23
Turner Enterprises, Inc.
2021-12-14
Kenall/Legrand
2021-11-15
Component Assembly Systems
2021-09-21
SCREEN Holdings
2021-08-10
Sebastian
2021-07-29
Miller-Valentine Group
2021-07-27
MPS Credit Union
2021-06-24
Buchanan Hauling & Rigging
2021-06-01
Langs Building Supplies Pty Ltd
2021-05-11
Challenge Manufacturing Company
2021-04-29
Airtech Advanced Materials Group
2021-04-13
DNS Toptech
2021-04-11
Joy Cone
2021-04-01
Wolfe Eye Clinic
2021-04-01
Bases Conversion and Development Authority (BCDA)
2021-04-01
Tygavac ltd.
2021-02-11
The managementtrust
2021-01-10
Multifeeder
2020-12-20
Commport Communications
2020-01-12
Windemuller