All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\51j25u042-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 51j25u042.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/D47985DD4C1063D2
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/D47985DD4C1063D2
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
i4bHa3b3o0mnexLoCoHotuMYfWlSI+U/HURywFXQGkU3nO0SVC73md1iQOWBJ+I3
xU8+ickZAXfDMhipTCj1flVNMLmU1ap/F+OFFyu4ku8znuOt56jqyAizGLeNqbWW
VDiqgilROofXffIvr34Uo5sIhFIi2WuZeB0WnlW49nRlgZe8Z1gWbY1guG7YpBb5
kqo3x5qFCkkjIk6j+dSMrWqFyTtZvXaF888g/AsmJMBPEGVWQ7fLUJNyHR0YKeYS
BkUrtwcenTDpY5Z3T7Jnh24L762rWhBtww/LZEhnR4JMUr5eBsCIO1WhsvmWGTMA
u9LNqeD2uXqCvtCSJ+9t3P1meYwF7OtL9C3X+gOHOr/6HfbfMn6TNqGwvlso4+3g
wdh0NUIlklQXg1j5RkomhmBtxC9nR6f5mAOCkKPrLPgMhiWf9TfZdmHhgtwXov/T
9TwO2pzDRJeptGzWfhpAd6RJkXjxcmJee/WX6jpzennqai98/Y70EVYvRDqHryvZ
ZsnT+pk00ZFdFTyE8p++9BlQGDoIgMI/WfcZDQTyg6flDDwVvQ2tjtt5W6ApCHSD
8OJbU9xxjp1jh17YX3nlcCg2WYt6WomAafIF4Dmvgn0aICf/zLEDozmD0E4Px88B
gOPe3oB5qzCP7j2ZJ0DX6rtP5q49cNCIuI1QvUf0XdwtWTI41kdrp0wJdPgT7fzz
cpfjIkSx4+n2F6ov2KPIEMyaP8dIoVWb4FphRlLWt+JqVPKG74mudTfgUNFeuNBH
7+bdvlpJXygkL+1HVnMQ3ihJVUahA83n3Jijnl+voxSo/0HjqtyRloWRxlgA26Tu
TvrILx7Q7slfDCx6Euk9hrs8nCdmDmbT3CVkqIyrWUIbMiqpTHKj9DdoCXm7xmmY
R61VgMFwqZFlc7bccvLtgjrhcU1CkoP2qs3gZGGiZHdJtITiN2QKLatoKiw6tmPF
OX+5H1fnNwMfsIxHO0q5pOD2geY1s8d09igjhCr+VCzcRb3a8XYHNpkWjqXfIEgb
glU/xbnMvJhofPHv9DIdz2CrC3avJwpQyMn28DtwOm+5KutdMm1kdZ02Csr0Iy1A
onFIwO/BdzrPk3fGXv7Vo6rBtIialbjC5wIagXP9uWzBaxRGPT1ipdKvNS1r4M/Q
cTXF8QLA+clvHFGsX4DBnC5iK8VNRIO55wzVRmGR6pU0Ppc5PWaVWg+Ibp77Wmrn
2ou7HLOtFl3At6ZDn0Wdpedy2B+ItYzx82cilv579e9+8dqWWXO+RgcjI1Emx32X
apXmceVLiqQrz1Zz
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
