Some well-known company asked us to decrypt few important files encrypted by Cobra Ransomware. Malware family seems to be pretty new, so we can't find any decryption tool in "The No More Ransom Project" webpage.
Fortunately, one of company employees attached a malware sample, including encrypted file.
Sample seems to be a decrypter program (archive password
gsbdontflaguspls), but it needs a key.Are you able to rip the key and decrypt that file?
Hint: Don't Google that extension, it's not a Dharma.
Format flagi:
ecsc{litery_cyfry_i_znaki_specjalne}.