Anthropic-Cybersecurity-Skills/skills/reverse-engineering-ransomware-encryption-routine/assets/template.md

Ransomware Encryption Analysis Report

Sample Info

Field	Value
SHA-256
Family
Ransom Note Name

Encryption Summary

Parameter	Value
Symmetric Algorithm	AES-256-CTR / ChaCha20
Asymmetric Algorithm	RSA-2048 / RSA-4096
Key Generation	CryptoAPI / CNG / Custom
IV Generation	Random / Fixed / Counter
File Extension Added

Decryption Feasibility

Factor	Assessment
PRNG Quality	Secure / Weak
Key in Memory	Yes / No
Implementation Flaws	None / Described below
Existing Decryptor	Available / Not available

Recommendations

1. Check No More Ransom project for existing decryptors
2. Preserve memory dumps for potential key recovery
3. Report to law enforcement and threat intelligence sharing