MoonLight Ransomware Decryption

MoonLight is a ransomware strain that encrypts user data and appends the .[itguysbackups@gmail.com]ID[US-8W0EU3GLYQ].lllll extension to filenames. This malware targets a wide array of critical data, transforming standard office documents such as report.docx.[itguysbackups@gmail.com]ID[US-8W0EU3GLYQ].lllll and financials.xlsx.[itguysbackups@gmail.com]ID[US-8W0EU3GLYQ].lllll into inaccessible formats. Furthermore, the attack vector aggressively pursues high-value infrastructure and database files, appending the extension to backups and virtualization…