General
-
Target
martinhal.exe
-
Size
122KB
-
Sample
210702-71mjgfl1kx
-
MD5
c3afcdffa4aeeee56b80cf2fd3c9758c
-
SHA1
e405c212107696a579494a67531ca5877956fac0
-
SHA256
9b46d03b690bda0df57c0ebb8dae0aebdd1d131beb500242fa8fe59cb260eed1
-
SHA512
3a984d836176b14d16ac0106c11ebd37f8d7343668e8156d33d74fc721e4224efadd1cc2ae22b3630bcf181eb077a55c571d9f670dd1552905e1fc4605b51346
Static task
static1
Behavioral task
behavioral1
Sample
martinhal.exe
Resource
win7v20210410
Behavioral task
behavioral2
Sample
martinhal.exe
Resource
win10v20210408
Malware Config
Extracted
sodinokibi
$2a$12$wbJ/jJsirdrxyDAHiIWYae.9jY8aqWe/s.JXkf0rAbaiM8Pd52U3G
8309
arteservicefabbro.com
answerstest.ru
geisterradler.de
embracinghiscall.com
haremnick.com
bodyforwife.com
dareckleyministries.com
marathonerpaolo.com
servicegsm.net
marketingsulweb.com
DupontSellsHomes.com
handi-jack-llc.com
naswrrg.org
amerikansktgodis.se
dlc.berlin
schoellhammer.com
caribbeansunpoker.com
houseofplus.com
moveonnews.com
grupocarvalhoerodrigues.com.br
thedresserie.com
abitur-undwieweiter.de
nokesvilledentistry.com
tomaso.gr
biapi-coaching.fr
edrcreditservices.nl
tanzprojekt.com
shiresresidential.com
surespark.org.uk
softsproductkey.com
psa-sec.de
danskretursystem.dk
songunceliptv.com
bildungsunderlebnis.haus
cnoia.org
comparatif-lave-linge.fr
tigsltd.com
aniblinova.wordpress.com
gemeentehetkompas.nl
agence-referencement-naturel-geneve.net
levdittliv.se
visiativ-industry.fr
dr-seleznev.com
live-con-arte.de
dublikator.com
kadesignandbuild.co.uk
kaotikkustomz.com
cityorchardhtx.com
lapinlviasennus.fi
simpkinsedwards.co.uk
allfortheloveofyou.com
vdberg-autoimport.nl
parking.netgateway.eu
mrsfieldskc.com
yassir.pro
pier40forall.org
mirjamholleman.nl
icpcnj.org
steampluscarpetandfloors.com
carrybrands.nl
xn--logopdie-leverkusen-kwb.de
effortlesspromo.com
montrium.com
zso-mannheim.de
corelifenutrition.com
bricotienda.com
myzk.site
securityfmm.com
basisschooldezonnewijzer.nl
harveybp.com
jenniferandersonwriter.com
wurmpower.at
promalaga.es
solhaug.tk
smhydro.com.pl
bouldercafe-wuppertal.de
edgewoodestates.org
polychromelabs.com
upmrkt.co
trulynolen.co.uk
kafu.ch
c2e-poitiers.com
bargningharnosand.se
pogypneu.sk
rksbusiness.com
sweering.fr
dr-tremel-rednitzhembach.de
turkcaparbariatrics.com
modelmaking.nl
hihaho.com
mymoneyforex.com
harpershologram.wordpress.com
balticdentists.com
ledmes.ru
imaginado.de
urmasiimariiuniri.ro
sportverein-tambach.de
bouquet-de-roses.com
innote.fi
andersongilmour.co.uk
fitovitaforum.com
retroearthstudio.com
stoeferlehalle.de
better.town
pferdebiester.de
dubnew.com
havecamerawilltravel2017.wordpress.com
enovos.de
xn--fnsterputssollentuna-39b.se
i-arslan.de
dezatec.es
beautychance.se
pubweb.carnet.hr
bptdmaluku.com
corola.es
aminaboutique247.com
groupe-frayssinet.fr
samnewbyjax.com
nijaplay.com
extensionmaison.info
bierensgebakkramen.nl
tetinfo.in
ulyssemarketing.com
joseconstela.com
iwelt.de
werkkring.nl
schlafsack-test.net
mezhdu-delom.ru
nakupunafoundation.org
fizzl.ru
gasolspecialisten.se
ra-staudte.de
mercantedifiori.com
gymnasedumanagement.com
cortec-neuro.com
iyahayki.nl
zieglerbrothers.de
kuntokeskusrok.fi
ladelirante.fr
sagadc.com
smart-light.co.uk
id-et-d.fr
lascuola.nl
jusibe.com
importardechina.info
creative-waves.co.uk
bowengroup.com.au
croftprecision.co.uk
humancondition.com
quemargrasa.net
longislandelderlaw.com
kojima-shihou.com
skanah.com
leda-ukraine.com.ua
smartypractice.com
malychanieruchomoscipremium.com
christinarebuffetcourses.com
classycurtainsltd.co.uk
puertamatic.es
jorgobe.at
milltimber.aberdeen.sch.uk
radaradvies.nl
otsu-bon.com
ftlc.es
schutting-info.nl
dr-pipi.de
noskierrenteria.com
smejump.co.th
d2marketing.co.uk
hairstylesnow.site
ampisolabergeggi.it
bargningavesta.se
kedak.de
lachofikschiet.nl
stemplusacademy.com
seitzdruck.com
brawnmediany.com
raschlosser.de
jacquin-maquettes.com
aarvorg.com
degroenetunnel.com
groupe-cets.com
12starhd.online
vermoote.de
notmissingout.com
rebeccarisher.com
entopic.com
dontpassthepepper.com
actecfoundation.org
katiekerr.co.uk
mdacares.com
burkert-ideenreich.de
happyeasterimages.org
tanzschule-kieber.de
personalenhancementcenter.com
selfoutlet.com
sandd.nl
leoben.at
littlebird.salon
beaconhealthsystem.org
saarland-thermen-resort.com
work2live.de
brigitte-erler.com
socstrp.org
stingraybeach.com
architekturbuero-wagner.net
familypark40.com
cactusthebrand.com
jobcenterkenya.com
theshungiteexperience.com.au
theadventureedge.com
henricekupper.com
pt-arnold.de
xtptrack.com
new.devon.gov.uk
fotoideaymedia.es
anthonystreetrimming.com
smogathon.com
lucidinvestbank.com
vetapharma.fr
atmos-show.com
pocket-opera.de
ouryoungminds.wordpress.com
baumkuchenexpo.jp
lloydconstruction.com
serce.info.pl
theletter.company
candyhouseusa.com
cranleighscoutgroup.org
centrospgolega.com
vyhino-zhulebino-24.ru
4youbeautysalon.com
siluet-decor.ru
teresianmedia.org
ivivo.es
chefdays.de
bouncingbonanza.com
rostoncastings.co.uk
notsilentmd.org
maxadams.london
panelsandwichmadrid.es
quizzingbee.com
projetlyonturin.fr
you-bysia.com.au
crosspointefellowship.church
adultgamezone.com
consultaractadenacimiento.com
urclan.net
vesinhnha.com.vn
ncid.bc.ca
devok.info
punchbaby.com
simulatebrain.com
conexa4papers.trade
hannah-fink.de
streamerzradio1.site
global-kids.info
rafaut.com
stopilhan.com
zzyjtsgls.com
mountaintoptinyhomes.com
heliomotion.com
copystar.co.uk
d1franchise.com
levihotelspa.fi
thefixhut.com
stampagrafica.es
revezlimage.com
sauschneider.info
patrickfoundation.net
creamery201.com
epwritescom.wordpress.com
argenblogs.com.ar
freie-baugutachterpraxis.de
peterstrobos.com
starsarecircular.org
miriamgrimm.de
newyou.at
celeclub.org
milestoneshows.com
slupetzky.at
real-estate-experts.com
simpliza.com
asgestion.com
seevilla-dr-sturm.at
eadsmurraypugh.com
hkr-reise.de
atalent.fi
thomasvicino.com
madinblack.com
pinkexcel.com
kissit.ca
otto-bollmann.de
wsoil.com.sg
completeweddingkansas.com
gadgetedges.com
drinkseed.com
mytechnoway.com
tomoiyuma.com
people-biz.com
parkcf.nl
lange.host
femxarxa.cat
refluxreducer.com
commonground-stories.com
heidelbergartstudio.gallery
bestbet.com
aselbermachen.com
carlosja.com
manifestinglab.com
tenacitytenfold.com
calxplus.eu
polzine.net
lynsayshepherd.co.uk
katketytaanet.fi
lionware.de
ilso.net
stallbyggen.se
bridgeloanslenders.com
echtveilig.nl
ivfminiua.com
anybookreader.de
evergreen-fishing.com
devlaur.com
tradiematepro.com.au
transliminaltribe.wordpress.com
pridoxmaterieel.nl
mousepad-direkt.de
artallnightdc.com
renergysolution.com
klusbeter.nl
ontrailsandboulevards.com
kostenlose-webcams.com
globedivers.wordpress.com
live-your-life.jp
miraclediet.fun
the-virtualizer.com
chaotrang.com
woodworkersolution.com
abuelos.com
oldschoolfun.net
foretprivee.ca
parkstreetauto.net
forestlakeuca.org.au
lapmangfpt.info.vn
spinheal.ru
fiscalsort.com
hmsdanmark.dk
tongdaifpthaiphong.net
bundabergeyeclinic.com.au
boosthybrid.com.au
vihannesporssi.fi
alvinschwartz.wordpress.com
sterlingessay.com
caribdoctor.org
mank.de
blossombeyond50.com
hairnetty.wordpress.com
c-a.co.in
elpa.se
faronics.com
allentownpapershow.com
theduke.de
jsfg.com
digi-talents.com
solinegraphic.com
hokagestore.com
danholzmann.com
liveottelut.com
fatfreezingmachines.com
mapawood.com
jbbjw.com
antonmack.de
maureenbreezedancetheater.org
tonelektro.nl
citymax-cr.com
porno-gringo.com
gratispresent.se
mrxermon.de
dw-css.de
verbisonline.com
accountancywijchen.nl
psnacademy.in
restaurantesszimmer.de
boulderwelt-muenchen-west.de
brandl-blumen.de
remcakram.com
asteriag.com
aodaichandung.com
strandcampingdoonbeg.com
mrsplans.net
mooshine.com
pivoineetc.fr
quickyfunds.com
pmcimpact.com
centuryrs.com
ctrler.cn
hoteledenpadova.it
321play.com.hk
body-guards.it
pmc-services.de
space.ua
suncrestcabinets.ca
jiloc.com
deoudedorpskernnoordwijk.nl
autodujos.lt
berliner-versicherungsvergleich.de
marcuswhitten.site
ausbeverage.com.au
chavesdoareeiro.com
sanyue119.com
yousay.site
upplandsspar.se
interactcenter.org
tsklogistik.eu
kirkepartner.dk
crediacces.com
justinvieira.com
body-armour.online
architecturalfiberglass.org
bigler-hrconsulting.ch
team-montage.dk
tophumanservicescourses.com
faizanullah.com
seminoc.com
luxurytv.jp
wraithco.com
kevinjodea.com
calabasasdigest.com
solerluethi-allart.ch
chrissieperry.com
eco-southafrica.com
maasreusel.nl
jameskibbie.com
herbstfeststaefa.ch
insp.bi
oncarrot.com
truenyc.co
mylolis.com
maratonaclubedeportugal.com
makeurvoiceheard.com
abl1.net
launchhubl.com
ihr-news.jp
almosthomedogrescue.dog
esope-formation.fr
siliconbeach-realestate.com
advizewealth.com
phantastyk.com
hrabritelefon.hr
sojamindbody.com
caffeinternet.it
fransespiegels.nl
outcomeisincome.com
kikedeoliveira.com
verifort-capital.de
naturavetal.hr
celularity.com
rerekatu.com
commercialboatbuilding.com
nvwoodwerks.com
officehymy.com
vibehouse.rw
ilcdover.com
corendonhotels.com
huissier-creteil.com
amylendscrestview.com
abogados-en-alicante.es
faroairporttransfers.net
ccpbroadband.com
schoolofpassivewealth.com
iwr.nl
minipara.com
falcou.fr
kindersitze-vergleich.de
reddysbakery.com
irishmachineryauctions.com
sotsioloogia.ee
strategicstatements.com
grelot-home.com
bee4win.com
no-plans.com
desert-trails.com
drugdevice.org
lecantou-coworking.com
summitmarketingstrategies.com
pomodori-pizzeria.de
trackyourconstruction.com
maryloutaylor.com
scenepublique.net
joyeriaorindia.com
fannmedias.com
mooreslawngarden.com
comarenterprises.com
crowd-patch.co.uk
johnsonfamilyfarmblog.wordpress.com
waywithwords.net
rieed.de
triactis.com
dpo-as-a-service.com
wmiadmin.com
irinaverwer.com
micro-automation.de
ceres.org.au
tennisclubetten.nl
bastutunnan.se
cuppacap.com
tinyagency.com
kaminscy.com
herbayupro.com
zenderthelender.com
fotoscondron.com
ventti.com.ar
resortmtn.com
limassoldriving.com
autopfand24.de
bigasgrup.com
xn--thucmctc-13a1357egba.com
despedidascostablanca.es
toponlinecasinosuk.co.uk
webmaster-peloton.com
greenfieldoptimaldentalcare.com
takeflat.com
ohidesign.com
ncs-graphic-studio.com
julis-lsa.de
slwgs.org
catholicmusicfest.com
international-sound-awards.com
praxis-management-plus.de
antiaginghealthbenefits.com
thewellnessmimi.com
winrace.no
jerling.de
systemate.dk
jasonbaileystudio.com
morawe-krueger.de
fitnessbazaar.com
newstap.com.ng
2ekeus.nl
travelffeine.com
latribuessentielle.com
thomas-hospital.de
instatron.net
n1-headache.com
smokeysstoves.com
onlybacklink.com
smalltownideamill.wordpress.com
rozemondcoaching.nl
profectis.de
liliesandbeauties.org
proudground.org
finediningweek.pl
all-turtles.com
dirittosanitario.biz
wari.com.pe
paradicepacks.com
hashkasolutindo.com
atozdistribution.co.uk
darnallwellbeing.org.uk
presseclub-magdeburg.de
thedad.com
jadwalbolanet.info
freie-gewerkschaften.de
oceanastudios.com
spectrmash.ru
pcprofessor.com
galserwis.pl
nandistribution.nl
ravensnesthomegoods.com
funjose.org.gt
ligiercenter-sachsen.de
nicoleaeschbachorg.wordpress.com
mastertechengineering.com
walkingdeadnj.com
cirugiauretra.es
blood-sports.net
petnest.ir
memaag.com
kampotpepper.gives
pickanose.com
webhostingsrbija.rs
sinal.org
fundaciongregal.org
controldekk.com
aakritpatel.com
friendsandbrgrs.com
schmalhorst.de
healthyyworkout.com
qualitaetstag.de
35-40konkatsu.net
iviaggisonciliegie.it
modestmanagement.com
leather-factory.co.jp
blumenhof-wegleitner.at
gopackapp.com
collaborativeclassroom.org
allure-cosmetics.at
bsaship.com
kariokids.com
ditog.fr
yourobgyn.net
roygolden.com
shonacox.com
hugoversichert.de
smithmediastrategies.com
dsl-ip.de
verytycs.com
kingfamily.construction
partnertaxi.sk
bordercollie-nim.nl
narcert.com
ikads.org
macabaneaupaysflechois.com
vannesteconstruct.be
backstreetpub.com
todocaracoles.com
videomarketing.pro
darrenkeslerministries.com
coffreo.biz
lenreactiv-shop.ru
div-vertriebsforschung.de
gmto.fr
oneheartwarriors.at
tandartspraktijkheesch.nl
prochain-voyage.net
pawsuppetlovers.com
naturstein-hotte.de
cite4me.org
merzi.info
woodleyacademy.org
365questions.org
gonzalezfornes.es
talentwunder.com
karacaoglu.nl
waynela.com
plastidip.com.ar
firstpaymentservices.com
hardinggroup.com
parks-nuernberg.de
toreria.es
lapinvihreat.fi
bradynursery.com
eaglemeetstiger.de
allamatberedare.se
1kbk.com.ua
besttechie.com
musictreehouse.net
adoptioperheet.fi
ki-lowroermond.nl
blacksirius.de
em-gmbh.ch
oslomf.no
worldhealthbasicinfo.com
monark.com
poultrypartners.nl
kosterra.com
humanityplus.org
kmbshipping.co.uk
babcockchurch.org
zimmerei-fl.de
michaelsmeriglioracing.com
modamilyon.com
nachhilfe-unterricht.com
glennroberts.co.nz
withahmed.com
thenewrejuveme.com
veybachcenter.de
lbcframingelectrical.com
shadebarandgrillorlando.com
diversiapsicologia.es
sairaku.net
euro-trend.pl
courteney-cox.net
aurum-juweliere.de
kenhnoithatgo.com
tips.technology
run4study.com
gantungankunciakrilikbandung.com
muamuadolls.com
easytrans.com.au
ogdenvision.com
intecwi.com
imadarchid.com
shiftinspiration.com
deprobatehelp.com
rumahminangberdaya.com
first-2-aid-u.com
artotelamsterdam.com
centromarysalud.com
vickiegrayimages.com
supportsumba.nl
y-archive.com
dekkinngay.com
geekwork.pl
hellohope.com
austinlchurch.com
bogdanpeptine.ro
corona-handles.com
triggi.de
jolly-events.com
parebrise-tla.fr
iyengaryogacharlotte.com
boompinoy.com
the-domain-trader.com
pcp-nc.com
edelman.jp
stormwall.se
extraordinaryoutdoors.com
naturalrapids.com
testcoreprohealthuk.com
pay4essays.net
highimpactoutdoors.net
advokathuset.dk
chatizel-paysage.fr
webcodingstudio.com
marietteaernoudts.nl
haar-spange.com
waveneyrivercentre.co.uk
lefumetdesdombes.com
juneauopioidworkgroup.org
lukeshepley.wordpress.com
victoriousfestival.co.uk
americafirstcommittee.org
saxtec.com
ussmontanacommittee.us
whyinterestingly.ru
frontierweldingllc.com
smale-opticiens.nl
lorenacarnero.com
plantag.de
jvanvlietdichter.nl
eglectonk.online
rhinosfootballacademy.com
marchand-sloboda.com
ziegler-praezisionsteile.de
sachnendoc.com
stemenstilte.nl
igfap.com
vancouver-print.ca
odiclinic.org
stoneys.ch
wien-mitte.co.at
denovofoodsgroup.com
synlab.lt
stefanpasch.me
alysonhoward.com
gastsicht.de
abogadosadomicilio.es
1team.es
ateliergamila.com
homng.net
boisehosting.net
cursoporcelanatoliquido.online
mindpackstudios.com
botanicinnovations.com
sportiomsportfondsen.nl
shsthepapercut.com
liikelataamo.fi
mediaclan.info
smessier.com
leeuwardenstudentcity.nl
slashdb.com
trystana.com
krcove-zily.eu
bxdf.info
thailandholic.com
eraorastudio.com
agence-chocolat-noir.com
southeasternacademyofprosthodontics.org
simoneblum.de
hushavefritid.dk
conasmanagement.de
brevitempore.net
noesis.tech
ungsvenskarna.se
deepsouthclothingcompany.com
wellplast.se
operaslovakia.sk
cerebralforce.net
lykkeliv.net
castillobalduz.es
craigmccabe.fun
coding-machine.com
homecomingstudio.com
sexandfessenjoon.wordpress.com
cimanchesterescorts.co.uk
socialonemedia.com
educar.org
qlog.de
rocketccw.com
christ-michael.net
krlosdavid.com
fax-payday-loans.com
imperfectstore.com
plv.media
rehabilitationcentersinhouston.net
cuspdental.com
satyayoga.de
norpol-yachting.com
klimt2012.info
broseller.com
drnice.de
filmstreamingvfcomplet.be
oneplusresource.org
appsformacpc.com
kunze-immobilien.de
romeguidedvisit.com
iphoneszervizbudapest.hu
datacenters-in-europe.com
dinslips.se
izzi360.com
fitnessingbyjessica.com
admos-gleitlager.de
tinkoff-mobayl.ru
bingonearme.org
mbfagency.com
meusharklinithome.wordpress.com
richard-felix.co.uk
myhealth.net.au
senson.fi
saka.gr
bhwlawfirm.com
alfa-stroy72.com
connectedace.com
ostheimer.at
wacochamber.com
torgbodenbollnas.se
ncuccr.org
farhaani.com
argos.wityu.fund
mbxvii.com
kidbucketlist.com.au
sevenadvertising.com
dnepr-beskid.com.ua
lightair.com
plotlinecreative.com
zimmerei-deboer.de
rosavalamedahr.com
employeesurveys.com
koken-voor-baby.nl
layrshift.eu
goodgirlrecovery.com
xn--rumung-bua.online
cafemattmeera.com
rota-installations.co.uk
ausair.com.au
asiluxury.com
destinationclients.fr
roadwarrior.app
chandlerpd.com
platformier.com
linnankellari.fi
thee.network
ecpmedia.vn
lichencafe.com
uimaan.fi
bloggyboulga.net
judithjansen.com
id-vet.com
pv-design.de
teczowadolina.bytom.pl
dushka.ua
mir-na-iznanku.com
nestor-swiss.ch
girlillamarketing.com
milsing.hr
loprus.pl
sloverse.com
alten-mebel63.ru
seagatesthreecharters.com
nmiec.com
praxis-foerderdiagnostik.de
onlyresultsmarketing.com
ymca-cw.org.uk
jyzdesign.com
abogadosaccidentetraficosevilla.es
kalkulator-oszczednosci.pl
baronloan.org
fibrofolliculoma.info
pasivect.co.uk
tastewilliamsburg.com
myteamgenius.com
walter-lemm.de
licor43.de
sportsmassoren.com
fairfriends18.de
zflas.com
101gowrie.com
maineemploymentlawyerblog.com
edv-live.de
lusak.at
vloeren-nu.nl
bayoga.co.uk
skiltogprint.no
baptisttabernacle.com
daklesa.de
piajeppesen.dk
simplyblessedbykeepingitreal.com
augenta.com
greenpark.ch
buroludo.nl
tandartspraktijkhartjegroningen.nl
baustb.de
igrealestate.com
thaysa.com
bigbaguettes.eu
iqbalscientific.com
geoffreymeuli.com
schraven.de
carriagehousesalonvt.com
theapifactory.com
teknoz.net
lmtprovisions.com
www1.proresult.no
danubecloud.com
delchacay.com.ar
hhcourier.com
lebellevue.fr
directwindowco.com
gporf.fr
tux-espacios.com
kaliber.co.jp
osterberg.fi
nsec.se
urist-bogatyr.ru
financescorecard.com
lillegrandpalais.com
mariposapropaneaz.com
behavioralmedicinespecialists.com
abogadoengijon.es
mediaplayertest.net
spsshomeworkhelp.com
charlottepoudroux-photographie.fr
markelbroch.com
blewback.com
foryourhealth.live
8449nohate.org
cheminpsy.fr
sofavietxinh.com
sanaia.com
digivod.de
xlarge.at
compliancesolutionsstrategies.com
mediaacademy-iraq.org
kath-kirche-gera.de
sipstroysochi.ru
bockamp.com
web.ion.ag
elimchan.com
tampaallen.com
hypozentrum.com
anteniti.com
makeflowers.ru
vanswigchemdesign.com
carolinepenn.com
insidegarage.pl
highlinesouthasc.com
ecoledansemulhouse.fr
stupbratt.no
zweerscreatives.nl
kisplanning.com.au
hotelsolbh.com.br
mooglee.com
paulisdogshop.de
expandet.dk
navyfederalautooverseas.com
coursio.com
ianaswanson.com
zervicethai.co.th
westdeptfordbuyrite.com
forskolorna.org
seproc.hn
alhashem.net
norovirus-ratgeber.de
hexcreatives.co
bimnapratica.com
tarotdeseidel.com
xoabigail.com
analiticapublica.es
whittier5k.com
love30-chanko.com
alsace-first.com
hebkft.hu
tulsawaterheaterinstallation.com
stacyloeb.com
deko4you.at
xn--singlebrsen-vergleich-nec.com
manutouchmassage.com
berlin-bamboo-bikes.org
associacioesportivapolitg.cat
assurancesalextrespaille.fr
tecnojobsnet.com
wolf-glas-und-kunst.de
sabel-bf.com
executiveairllc.com
exenberger.at
mountsoul.de
polymedia.dk
gaiam.nl
mirkoreisser.de
fensterbau-ziegler.de
kamahouse.net
kojinsaisei.info
pixelarttees.com
bafuncs.org
journeybacktolife.com
purposeadvisorsolutions.com
artige.com
ftf.or.at
portoesdofarrobo.com
spacecitysisters.org
sobreholanda.com
makeitcount.at
braffinjurylawfirm.com
xn--vrftet-pua.biz
vietlawconsultancy.com
knowledgemuseumbd.com
campusoutreach.org
ecopro-kanto.com
coastalbridgeadvisors.com
camsadviser.com
symphonyenvironmental.com
apprendrelaudit.com
tuuliautio.fi
pierrehale.com
sla-paris.com
nancy-informatique.fr
zewatchers.com
binder-buerotechnik.at
balticdermatology.lt
devstyle.org
hotelzentral.at
helikoptervluchtnewyork.nl
helenekowalsky.com
readberserk.com
cursosgratuitosnainternet.com
huehnerauge-entfernen.de
latestmodsapks.com
dutchbrewingcoffee.com
vox-surveys.com
nuzech.com
biortaggivaldelsa.com
nataschawessels.com
ino-professional.ru
unim.su
wasmachtmeinfonds.at
colorofhorses.com
heurigen-bauer.at
homesdollar.com
logopaedie-blomberg.de
aunexis.ch
spd-ehningen.de
penco.ie
stoeberstuuv.de
craftleathermnl.com
theclubms.com
autofolierung-lu.de
luckypatcher-apkz.com
nurturingwisdom.com
noixdecocom.fr
planchaavapor.net
troegs.com
milanonotai.it
vitavia.lt
jeanlouissibomana.com
coding-marking.com
slimidealherbal.com
associationanalytics.com
clos-galant.com
ralister.co.uk
manijaipur.com
cwsitservices.co.uk
insigniapmg.com
rimborsobancario.net
aco-media.nl
boldcitydowntown.com
idemblogs.com
drfoyle.com
ruralarcoiris.com
rollingrockcolumbia.com
rushhourappliances.com
philippedebroca.com
paymybill.guru
blgr.be
123vrachi.ru
unetica.fr
olejack.ru
mylovelybluesky.com
psc.de
physiofischer.de
uranus.nl
bauertree.com
neuschelectrical.co.za
bunburyfreightservices.com.au
hvccfloorcare.com
wychowanieprzedszkolne.pl
baylegacy.com
gasbarre.com
qualitus.com
kamienny-dywan24.pl
i-trust.dk
galleryartfair.com
twohourswithlena.wordpress.com
danielblum.info
buymedical.biz
micahkoleoso.de
aglend.com.au
ilive.lt
nativeformulas.com
slimani.net
nhadatcanho247.com
bristolaeroclub.co.uk
vorotauu.ru
x-ray.ca
sw1m.ru
campus2day.de
ai-spt.jp
tanciu.com
lubetkinmediacompanies.com
craigvalentineacademy.com
cleliaekiko.online
nosuchthingasgovernment.com
4net.guru
finde-deine-marke.de
deltacleta.cat
microcirc.net
opatrovanie-ako.sk
evangelische-pfarrgemeinde-tuniberg.de
spylista.com
villa-marrakesch.de
ceid.info.tr
dubscollective.com
spargel-kochen.de
vibethink.net
filmvideoweb.com
higadograsoweb.com
beyondmarcomdotcom.wordpress.com
mmgdouai.fr
pelorus.group
offroadbeasts.com
vitalyscenter.es
mepavex.nl
testzandbakmetmening.online
bodyfulls.com
pasvenska.se
ora-it.de
syndikat-asphaltfieber.de
acomprarseguidores.com
mikeramirezcpa.com
koko-nora.dk
labobit.it
themadbotter.com
fayrecreations.com
denifl-consulting.at
trapiantofue.it
art2gointerieurprojecten.nl
flexicloud.hk
nacktfalter.de
dramagickcom.wordpress.com
daniel-akermann-architektur-und-planung.ch
blogdecachorros.com
itelagen.com
kao.at
pointos.com
gw2guilds.org
jakekozmor.com
greenko.pl
oemands.dk
lescomtesdemean.be
xn--fn-kka.no
sahalstore.com
huesges-gruppe.de
midmohandyman.com
mdk-mediadesign.de
facettenreich27.de
apolomarcas.com
deschl.net
airconditioning-waalwijk.nl
delawarecorporatelaw.com
figura.team
hatech.io
waermetauscher-berechnen.de
jobmap.at
transportesycementoshidalgo.es
birnam-wood.com
sporthamper.com
hiddencitysecrets.com.au
charlesreger.com
podsosnami.ru
precisionbevel.com
dutchcoder.nl
erstatningsadvokaterne.dk
durganews.com
zonamovie21.net
promesapuertorico.com
htchorst.nl
cyntox.com
csgospeltips.se
aprepol.com
gamesboard.info
shhealthlaw.com
perbudget.com
mardenherefordshire-pc.gov.uk
sarbatkhalsafoundation.org
tstaffing.nl
igorbarbosa.com
jandaonline.com
bookspeopleplaces.com
antenanavi.com
autodemontagenijmegen.nl
myhostcloud.com
blog.solutionsarchitect.guru
garage-lecompte-rouen.fr
mrtour.site
crowcanyon.com
yamalevents.com
bbsmobler.se
xltyu.com
ahouseforlease.com
evologic-technologies.com
-
net
false
-
pid
$2a$12$wbJ/jJsirdrxyDAHiIWYae.9jY8aqWe/s.JXkf0rAbaiM8Pd52U3G
-
prc
winword
xfssvccon
outlook
firefox
msaccess
ocssd
tbirdconfig
oracle
thunderbird
excel
dbsnmp
ocautoupds
mydesktopqos
sql
onenote
sqbcoreservice
infopath
isqlplussvc
mspub
mydesktopservice
agntsvc
encsvc
dbeng50
synctime
visio
steam
powerpnt
wordpad
ocomm
thebat
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [-] Whats Happen? [-] Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [-] What guarantees? [-] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decoder.re/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} ----------------------------------------------------------------------------------------- !!! DANGER !!! DON'T try to change files by yourself, DON'T use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
8309
-
svc
sophos
backup
vss
svc$
veeam
mepocs
sql
memtas
Extracted
C:\spk4n3021-readme.txt
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/E18E5A89CD614942
http://decoder.re/E18E5A89CD614942
Targets
-
-
Target
martinhal.exe
-
Size
122KB
-
MD5
c3afcdffa4aeeee56b80cf2fd3c9758c
-
SHA1
e405c212107696a579494a67531ca5877956fac0
-
SHA256
9b46d03b690bda0df57c0ebb8dae0aebdd1d131beb500242fa8fe59cb260eed1
-
SHA512
3a984d836176b14d16ac0106c11ebd37f8d7343668e8156d33d74fc721e4224efadd1cc2ae22b3630bcf181eb077a55c571d9f670dd1552905e1fc4605b51346
Score10/10-
Modifies Windows Firewall
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-