All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
We strongly encourage You to pay your attention to this message and read it to the end.
All Your files are encrypted, and currently unavailable, now all files on your system has extension {EXT}
Before that, all of your most important personal and business
files were backed up to our secure offline storage.
We took them for temporary storage - but we don't need your
files and we are not personally interested in your business.
Our encryption algorithm is the most technically difficult and max resistant to burglary.
Only OUR specialists can decrypted your files without loss(!)
Any attempts to decrypt files on your own lead to damage them beyond repair(!)
Best way to you will be consent to negotiations and mutual agreement between us.
To connect us you need to download TOR browser and follow the link to begin
negotiations.(You can find full instructions below.)
We are waiting You and ready to listen all
your offers and discuss them.
If You will ignore this letter - we will have to sell
closed auction all yours private files, photoes, business correspondence,
documents and business files + with our analysis of your work
activity (weakness of your business, financial violations and the opportunity
to profit from this information). It will offset our financial losses.
Or we'll just put all your files in the public domain, where everyone can download
and use them as they wish.
* For TOR Browser
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/
We are known as "Sodinokibi (REvil) Ransomware". For example, this article:
https://www.coveware.com/blog/2019/7/15/ransomware-amounts-rise-3x-in-q2-as-ryuk-amp-sodinokibi-spread
You have a guarantee that your files will be returned 100 %.
And remember, this is only business, nothing personal..
We have a concept of business honor, and we can promise something if we come to a mutual agreement:
1. We guarantee to decrypt all your files in the shortest possible time
2. We will delete all your files and forget about your company.
3. We will show your weaknesses in your networks.
.-= INSTRUCTIONS TO CONNECT =-.
How to get access on website?
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
----------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself,
DONT use any third party software for restoring your data or antivirus solutions -
its may entail damge of the private key and, as result, The Loss all your data!
sub
7901
svc
vss
svc$
veeam
memtas
sql
backup
mepocs
sophos
Extracted
Path
C:\l0424z-readme.txt
Ransom Note
---=== Welcome. Again. ===---
We strongly encourage You to pay your attention to this message and read it to the end.
All Your files are encrypted, and currently unavailable, now all files on your system has extension l0424z
Before that, all of your most important personal and business
files were backed up to our secure offline storage.
We took them for temporary storage - but we don't need your
files and we are not personally interested in your business.
Our encryption algorithm is the most technically difficult and max resistant to burglary.
Only OUR specialists can decrypted your files without loss(!)
Any attempts to decrypt files on your own lead to damage them beyond repair(!)
Best way to you will be consent to negotiations and mutual agreement between us.
To connect us you need to download TOR browser and follow the link to begin
negotiations.(You can find full instructions below.)
We are waiting You and ready to listen all
your offers and discuss them.
If You will ignore this letter - we will have to sell
closed auction all yours private files, photoes, business correspondence,
documents and business files + with our analysis of your work
activity (weakness of your business, financial violations and the opportunity
to profit from this information). It will offset our financial losses.
Or we'll just put all your files in the public domain, where everyone can download
and use them as they wish.
* For TOR Browser
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/
We are known as "Sodinokibi (REvil) Ransomware". For example, this article:
https://www.coveware.com/blog/2019/7/15/ransomware-amounts-rise-3x-in-q2-as-ryuk-amp-sodinokibi-spread
You have a guarantee that your files will be returned 100 %.
And remember, this is only business, nothing personal..
We have a concept of business honor, and we can promise something if we come to a mutual agreement:
1. We guarantee to decrypt all your files in the shortest possible time
2. We will delete all your files and forget about your company.
3. We will show your weaknesses in your networks.
.-= INSTRUCTIONS TO CONNECT =-.
How to get access on website?
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/09C9A4DC58013119
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/09C9A4DC58013119
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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----------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself,
DONT use any third party software for restoring your data or antivirus solutions -
its may entail damge of the private key and, as result, The Loss all your data!
