Ransom Note Comparison

Upload a ransom note to identify likely ransomware families by similarity, or search by a keyword to find known public decryptor links when they exist.

• Compare Notes
• Search for Decryptors

API BASE URL: https://ai.perkinsfund.org

---

Compare Notes

Endpoint: /api/tool/ransomnotes

Request type: POST

Data type: File

Headers (optional): X-Api-Key: API KEY

NOTE: It is possible to get more than one item per list

Example request

curl -F"file=@FILENAME" https://ai.perkinsfund.org/api/tool/ransomnotes

Expected outputs

Success:

{
  ...
  "results": [
    [
      "8base",
      "91%"
    ]
  ],
  ...
}

Unsuccessful:

{
  ...
  "error": {
    "error_message": "MESSAGE"
  },
  ...
}

---

Search Decryptors

Endpoint: /api/tool/ransomnotes/links

Request type: POST

Data type: JSON

Headers (optional): X-Api-Key: API KEY

NOTE: It is possible to get more than one item per list

Example request

curl -XPOST -H "content-type: application/json" --data '{"search_term": "akira"}' https://ai.perkinsfund.org/api/tool/ransomnotes/links

Expected outputs

Success:

{
  ...
  "results": [
    "https://files.avast.com/files/decryptor/avast_decryptor_akira64.exe"
  ],
  ...
}

Unsuccessful:

{
  ...
  "error": {
    "error_message": "No search term specified?"
  },
  ...
}