- Home
- Detectable Ransomware
- JobCrypter
Ransomware Research
JobCrypter Ransomware
JobCrypter is a malicious ransomware strain that encrypts victim files and demands ransom payment for decryption. First observed in the wild on February 1, 2017, this ransomware has been actively targeting systems worldwide. Security researchers also track this malware under the aliases: JobCrypter NextGen: Die Hard 4.
Quick Facts
- Ransomware Family
- JobCrypter
- First Seen
- February 1, 2017
- Known Aliases
- JobCrypter NextGen: Die Hard 4
How JobCrypter Ransomware Works
Targeted Files
https://app.any.run/tasks/4f64801d-5bbf-4502-ac5d-77316fe85f4c/#
File Encryption Patterns
JobCrypter modifies encrypted files using specific patterns to mark them as encrypted:
File extensions added after encryption:
..locked
..css
..txt
Ransom Note and Payment Demands
After encrypting files, JobCrypter displays ransom notes demanding payment for file recovery:
Comment débloquer mes fichiers.txt(Как разблокировать мои файлы)
ntuser.ini.css
Ransom message:
notes/ntuser.ini.css
Note locations:
UserProfile
Technical Indicators
Associated Executable Files
The following executable files are associated with JobCrypter ransomware:
FL.exe
20.exe
JobCrypt.exe
L o c k e r.exe
ch.exe
Opera
0806(23).exe
4125478471.exe
Y76KVZT1.exe
H3I8J627.exe
2 (3).exe
71T5ZZKM.exe
myfile.exe
2.exe
216NTWLN.exe
2KYZYYVP.exe
2 (1).exe
officiel.exe
784775471.exe
succeeded.exe
tredszer.exe
ransomware_die_hard_4.exe
784578536.exe
dotNET_Reactor.exe
ERFFREEED.exe
yokingg.exe
yokingg.bin
lokjhgfder.exe
Elastio Can Help You
Don't let JobCrypter ransomware take over your data
Elastio provides advanced ransomware protection and recovery solutions to keep your organization safe.
About This Analysis
This JobCrypter ransomware analysis is part of Elastio's comprehensive ransomware detection database. Elastio provides advanced ransomware protection and recovery solutions, helping organizations defend against and recover from ransomware attacks like JobCrypter.
Last updated: July 30, 2025