Sirattacker And ALC Ransomware Analysis

The Sirattacker and ALC ransomware families continue to gain traction and compromise Microsoft Windows devices. Sirattacker is a variant of Chaos ransomware and is possibly distributed as an Ethereum mining application. The malware gives the victim 72 hours to purchase the decryption key for $400.00US. ALC ransomware creates several files on the infected desktop and displays a ransom note demanding $2000.00US for access to the locked files. The malware does not actually encrypt files but acts more of a scareware to convince the victim to pay the ransom.