2015-05-25 - Affiliate

On the other side of CTB-Locker : the Affiliate server.



If you do not know what is CTB-Locker (aka Critroni) take a look at : "Crypto Ransomware" CTB-Locker (Critroni.A) on the rise (where you'll find the Advert as well)

Hosted on tor : ctbservermurt37p.onion

CTB-Locker affiliate server - Home
CTB-Locker affiliate - Price rules
CTB-Locker affiliate - Payouts
CTB-Locker affiliate - Stats
CTB-Locker affiliate - Installs

CTB-Locker affiliate - Get exe
(so both on tor)
CTB-Locker affiliate - Support
CTB-Locker affiliate - User Messages (empty here)
CTB-Locker - API
Thanks a lot to @Trojan7Sec for sharing the location of the server.

Read more :
CIRCL TR-33 Analysis - CTB-Locker / Critroni - Circl.Lu - 2015-02-17
CTB-Locker payload obfuscation layers analysis - Christophe Rieunier
 "Crypto Ransomware" CTB-Locker (Critroni.A) on the rise - 2015-04-18