Lock off "kruu"

[PAW 0]

Good afternoon! how to decrypt files encrypted under "kruu"?

[Marcos 5,074]

This is probably Filecoder.STOP, decryption is not possible. This ransomware is typical for running on a remote machine (e.g. with ESET not installed or disabled) and encrypting files in local shares.

Please provide:
1, Log collected with ESET Log Collector
2, A couple of examples of encrypted files, ideally Office documents
3, The ransomware note with payment instructions.