Static task
static1
Behavioral task
behavioral1
Sample
f8b0760d39e57a7c89e66ebb3b254a89ec8bea7793511f7ce71994d9a0946d97.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
f8b0760d39e57a7c89e66ebb3b254a89ec8bea7793511f7ce71994d9a0946d97.dll
Resource
win10-en-20211208
General
-
Target
f8b0760d39e57a7c89e66ebb3b254a89ec8bea7793511f7ce71994d9a0946d97
-
Size
164KB
-
MD5
72b88a31c6bd378ea66698a6ab15f6b8
-
SHA1
68c791b584b315f491443d3826f209c0e3ab9375
-
SHA256
f8b0760d39e57a7c89e66ebb3b254a89ec8bea7793511f7ce71994d9a0946d97
-
SHA512
6a707908cbd63d14d738dce9c5eb920e3cfd20e2dc90f540b79aaaa52dd79c935fa8569f2f88d09ddeebdfc55874b7e3e9980b0a6d2eb27e10e99335a631a3df
-
SSDEEP
3072:1WhoCE3yw1oVj5DJtOicNDWEzZokp7LMLUx7igK:1WhA3NoB5Cj5zZokxTlin
Malware Config
Extracted
sodinokibi
23
1237
janasfokus.com
professionetata.com
fysiotherapierijnmond.nl
taulunkartano.fi
mslp.org
tecleados.com
geoweb.software
awaitspain.com
mieleshopping.it
charlesfrancis.photos
mercadodelrio.com
jalkapuu.net
cookinn.nl
matteoruzzaofficial.com
skoczynski.eu
spectamarketingdigital.com.br
hawthornsretirement.co.uk
theintellect.edu.pk
ayudaespiritualtamara.com
successcolony.com.ng
animalfood-online.de
energosbit-rp.ru
fann.ru
chinowarehousespace.com
stralsund-ansichten.de
speakaudible.com
legundschiess.de
glennverschueren.be
secrets-clubs.co.uk
metriplica.academy
naukaip.ru
plbinsurance.com
geitoniatonaggelon.gr
biketruck.de
narca.net
tellthebell.website
pinthelook.com
bringmehope.org
ivancacu.com
saint-malo-developpement.fr
mensemetgesigte.co.za
dayenne-styling.nl
cxcompany.com
stressreliefadvice.com
parksideseniorliving.net
haard-totaal.nl
acibademmobil.com.tr
gaearoyals.com
encounter-p.net
testitjavertailut.net
dantreranch.com
innervisions-id.com
cp-bap.de
devplus.be
interlinkone.com
theatre-embellie.fr
rubyaudiology.com
zwemofficial.nl
morgansconsult.com
asiaartgallery.jp
livelai.com
profibersan.com
brinkdoepke.eu
wineandgo.hu
lunoluno.com
smartworkplaza.com
muller.nl
lisa-poncon.fr
jollity.hu
k-zubki.ru
richardkershawwines.co.za
perceptdecor.com
mollymccarthydesign.com
boomerslivinglively.com
xn--80addfr4ahr.dp.ua
axisoflove.org:443
framemyballs.com
lsngroupe.com
chris-anne.com
druktemakersheerenveen.nl
electricianul.com
buzzneakers.com
eurethicsport.eu
projektparkiet.pl
2020hindsight.info
mazzaropi.com.br
forskolinslimeffect.net
kryptos72.com
scentedlair.com
texanscan.org
k-v-f.de
oththukaruva.com
ncjc.ca
supercarhire.co.uk
the5thquestion.com
eatyoveges.com
metallbau-hartmann.eu
publicompserver.de
goodherbalhealth.com
sunsolutions.es
adaduga.info
greatofficespaces.net
oro.ae
bmw-i-pure-impulse.com
linearete.com
ronielyn.com
clemenfoto.dk
hostingbangladesh.net
epicjapanart.com
luvbec.com
n-newmedia.de
topvijesti.net
hypogenforensic.com
fixx-repair.com
forextimes.ru
michal-s.co.il
kelsigordon.com
cssp-mediation.org
bertbutter.nl
traitware.com
signamedia.de
metroton.ru
sber-biznes.com
sycamoregreenapts.com
happylublog.wordpress.com
glende-pflanzenparadies.de
eastgrinsteadwingchun.com
topautoinsurers.net
forumsittard.nl
precisetemp.com
condormobile.fr
bd2fly.com
peninggibadan.co.id
margaretmcshane.com
opticahubertruiz.com
krishnabrawijaya.com
specialtyhomeservicesllc.com
globalskills.pt
zorgboerderijravensbosch.nl
ultimatelifesource.com
magnetvisual.com
tzn.nu
nuohous.com
arearugcleaningnyc.com
chatberlin.de
hoteltantra.com
mac-computer-support-hamburg.de
rishigangoly.com
chomiksy.net
muni.pe
futurenetworking.com
johnsonweekly.com
carsten.sparen-it.de
fanuli.com.au
angelsmirrorus.com
diverfiestas.com.es
biodentify.ai
tilldeeke.de
jglconsultancy.com
xn--80abehgab4ak0ddz.xn--p1ai
dentalcircle.com
hensleymarketing.com
5pointpt.com
goodboyscustom.com
entdoctor-durban.com
ledyoucan.com
renehartman.nl
rizplakatjaya.com
kenmccallum.com
avisioninthedesert.com
onlinemarketingsurgery.co.uk
pro-gamer.pl
colored-shelves.com
schlagbohrmaschinetests.com
acumenconsultingcompany.com
theater-lueneburg.de
beauty-traveller.com
webforsites.com
itheroes.dk
centuryvisionglobal.com
alpesiberie.com
myfbateam.com
delegationhub.com
go.labibini.ch
nalliasmali.net
baikalflot.ru
bendel-partner.de
elex.is
uci-france.fr
lyricalduniya.com
tothebackofthemoon.com
factoriareloj.com
jobstomoveamerica.org
bluetenreich-brilon.de
perfectgrin.com
angeleyezstripclub.com
parentsandkids.com
sppdstats.com
lifeinbreaths.com
fi-institutionalfunds.com
artcase.pl
subquercy.fr
martha-frets-ceramics.nl
drbenveniste.com
andrealuchesi.it
dreamvoiceclub.org
cmascd.com
jmmartinezilustrador.com
hawaiisteelbuilding.com
loparnille.se
dogsunlimitedguide.com
marcandy.com
nieuwsindeklas.be
sveneulberg.de
aslog.fr
terraflair.de
gurutechnologies.net
moira-cristescu.com
latteswithleslie.com
gardenpartner.pl
photographycreativity.co.uk
dierenambulancealkmaar.nl
eafx.pro
ziliak.com
nxtstg.org
kafkacare.com
brunoimmobilier.com
internestdigital.com
saberconcrete.com
hvitfeldt.dk
leijstrom.com
protoplay.ca
physio-lang.de
mindsparkescape.com
craftingalegacy.com
sytzedevries.com
ruggestar.ch
wyreforest.net
internalresults.com
ronaldhendriks.nl
anchelor.com
biblica.com
curtsdiscountguns.com
markseymourphotography.co.uk
vapiano.fr
shortysspices.com
catering.com
awag-blog.de
brannbornfastigheter.se
astrographic.com
pinkxgayvideoawards.com
epsondriversforwindows.com
mike.matthies.de
ntinasfiloxenia.gr
lattalvor.com
miscbo.it
belinda.af
ufovidmag.com
mariamalmahdi.com
xn--ziinoapte-6ld.ro
sjtpo.org
alabamaroofingllc.com
jefersonalessandro.com
zdrowieszczecin.pl
goeppinger-teppichreinigung.de
piestar.com
fazagostar.co
georgemuncey.com
unexplored.gr
reygroup.pt
studionumerik.fr
bourchier.org
rename.kz
funworx.de
osn.ro
guohedd.com
relevantonline.eu
qandmmusiccenter.com
oscommunity.de
wg-heiligenstadt.de
collegetennis.info
theboardroomafrica.com
thepixelfairy.com
arthakapitalforvaltning.dk
malevannye.ru
amelielecompte.wordpress.com
annenymus.com
clinic-beethovenstrasse-ag.ch
fluzfluzrewards.com
alexwenzel.de
whoopingcrane.com
lassocrm.com
masecologicos.com
lgiwines.com
skidpiping.de
magrinya.net
drvoip.com
cmeow.com
zumrutkuyutemel.com
powershell.su
irizar.com
lovetzuchia.com
teethinadaydentalimplants.com
grupoexin10.com
alisodentalcare.com
frimec-international.es
wordpress.idium.no
buffdaddyblog.com
worldproskitour.com
fta-media.com
airvapourbarrier.com
janmorgenstern.com
atrgroup.it
jameswilliamspainting.com
t3brothers.com
mneti.ru
maryairbnb.wordpress.com
shrinkingplanet.com
nourella.com
ketomealprep.academy
lovcase.com
klapanvent.ru
thegrinningmanmusical.com
laaisterplakky.nl
nvisionsigns.com
ox-home.com
paradigmlandscape.com
primemarineengineering.com
bychowo.pl
computer-place.de
stabilisateur.fr
cleanroomequipment.ie
foerderverein-vatterschule.de
apogeeconseils.fr
bundan.com
werkzeugtrolley.net
pansionatblago.ru
a-zpaperwork.eu
triplettagaite.fr
web865.com
spacebel.be
hartofurniture.com
fbmagazine.ru
pokemonturkiye.com
weddingceremonieswithtim.com
chorusconsulting.net
paprikapod.com
bluemarinefoundation.com
otpusk.zp.ua
riffenmattgarage.ch
donau-guides.eu
teutoradio.de
patassociation.com
pureelements.nl
amorbellezaysalud.com
deduktia.fi
goddardleadership.org
crestgood.com
leadforensics.com
fidelitytitleoregon.com
dieetuniversiteit.nl
hm-com.com
operativadigital.com
karmeliterviertel.com
rolleepollee.com
bridalcave.com
bluelakevision.com
fotoeditores.com
90nguyentuan.com
buerocenter-butzbach-werbemittel.de
agora-collectivites.com
creohn.de
skooppi.fi
natturestaurante.com.br
lookandseen.com
ahgarage.com
aheadloftladders.co.uk
imajyuku-sozoku.com
maxcube24.com.ua
quitescorting.com
adterium.com
juergenblaetz.de
ocduiblog.com
broccolisoep.nl
brighthillgroup.com
lidkopingsnytt.nu
onesynergyinternational.com
opt4cdi.com
mrcar.nl
ramirezprono.com
voice2biz.com
furland.ru
glas-kuck.de
scholarquotes.com
test-teleachat.fr
awaisghauri.com
finsahome.co.uk
abulanov.com
logosindustries.com
denverwynkoopdentist.com
zinnystar.com
thenalpa.com
dentourage.com
elitkeramika-shop.com.ua
aceroprime.com
thesilkroadny.com
dinedrinkdetroit.com
aquacheck.co.za
citydogslife.com
fsbforsale.com
customroasts.com
innersurrection.com
tweedekansenloket.nl
qrs-international.com
airserviceunlimited.com
arabianmice.com
finnergo.eu
aidanpublishing.co.uk
subyard.com
stathmoulis.gr
trivselsguide.dk
alnectus.com
dennisverschuur.com
azerbaycanas.com
p-ride.live
cap29010.it
innovationgames-brabant.nl
adabible.org
jlgraphisme.fr
devus.de
sarahspics.co.uk
gatlinburgcottage.com
sbit.ag
shortsalemap.com
birthplacemag.com
oportowebdesign.com
jakubrybak.com
bonitabeachassociation.com
skinkeeper.li
efficiencyconsulting.es
omegamarbella.com
nauticmarine.dk
alaskaremote.com
yuanshenghotel.com
bescomedical.de
groovedealers.ru
spirello.nl
pourlabretagne.bzh
eksperdanismanlik.com
acornishstudio.co.uk
sealgrinderpt.com
agencewho-aixenprovence.fr
mrkluttz.com
elliemaccreative.wordpress.com
yayasanprimaunggul.org
graygreenbiomedservices.com
neolaiamedispa.com
mesajjongeren.nl
medicalsupportco.com
nepal-pictures.com
oexebusiness.com
m2graph.fr
edvestors.org
rattanwarehouse.co.uk
lesyeuxbleus.net
rentsportsequip.com
artvark.nl
rokthetalk.com
claudiakilian.de
greeneyetattoo.com
nevadaruralhousingstudies.org
augen-praxisklinik-rostock.de
livedeveloper.com
askstaffing.com
bumbipdeco.site
kemtron.fr
tbalp.co.uk
arazi.eus
campusce.com
bcmets.info
slotenmakerszwijndrecht.nl
rechtenplicht.be
unboxtherapy.site
louiedager.com
satoblog.org
profiz.com
cainlaw-okc.com
mondolandscapes.com
hostaletdelsindians.es
pilotgreen.com
so-sage.fr
initconf.com
jdscenter.com
motocrosshideout.com
gazelle-du-web.com
hom-frisor.dk
mbuildinghomes.com
khtrx.com
jonnyhooley.com
volta.plus
myplaywin3.com
campusescalade.com
techybash.com
aoyama.ac
victorvictoria.com
altitudeboise.com
ilovefullcircle.com
poems-for-the-soul.ch
sachainchiuk.com
licensed-public-adjuster.com
sharonalbrightdds.com
tatyanakopieva.ru
bodymindchallenger.com
ncn.nl
pubcon.com
iron-mine.ru
reizenmetkinderen.be
tutvracks.com
belofloripa.be
concontactodirecto.com
randyabrown.com
hiddensee-buhne11.de
mustangmarketinggroup.com
cac2040.com
solidhosting.nl
xrresources.com
kartuindonesia.com
wademurray.com
alattekniksipil.com
coachpreneuracademy.com
bcabattoirs.org
rsidesigns.com
chatterchatterchatter.com
prometeyagro.com.ua
tanatek.com
unislaw-narty.pl
der-stempelking.de
sochi-okna23.ru
stitch-n-bitch.com
mamajenedesigns.com
mayprogulka.ru
cormanmarketing.com
skyscanner.ro
peppergreenfarmcatering.com.au
corporacionrr.com
cc-experts.de
billscars.net
babysitting-hk.helpergo.co
bjornvanvulpen.nl
agenceassemble.fr
enactusnhlstenden.com
ddmgen.com
hekecrm.com
stanleyqualitysystems.com
memphishealthandwellness.com
prodentalblue.com
almamidwifery.com
brisbaneosteopathic.com.au
bilius.dk
redctei.co
nginx.com
midwestschool.org
veggienessa.com
cl0nazepamblog.com
brownswoodblog.com
tastevirginia.com
photonag.com
denhaagfoodie.nl
yourhappyevents.fr
husetsanitas.dk
pedmanson.com
fitnessblenderstory.com
palmenhaus-erfurt.de
smartmind.net
salonlamar.nl
antesacademy.it
cesep2019.com
happycatering.de
ijsselbeton.nl
afbudsrejserallinclusive.dk
rivermusic.nl
teamsegeln.ch
descargandoprogramas.com
tieronechic.com
liepertgrafikweb.at
marmarabasin.com
beandrivingschool.com.au
lagschools.ng
buonabitare.com
sprintcoach.com
gta-jjb.fr
distrifresh.com
business-basic.de
albcleaner.fr
kdbrh.com
adedesign.com
aberdeenartwalk.org
davedavisphotos.com
limmortelyouth.com
factorywizuk.com
directique.com
renderbox.ch
sweetz.fr
alwaysdc.com
ciga-france.fr
dentallabor-luenen.de
dmlcpa.com
fskhjalmar.se
ownidentity.com
therapybusinessacademy.com
uncensoredhentaigif.com
boloria.de
fascaonline.com
hnkns.com
gratiocafeblog.wordpress.com
verbouwingsdouche.nl
rapid5kloan.org
holocine.de
expohomes.com
mikegoodfellow.co.uk
die-immo-agentur.de
imagine-entertainment.com
jaaphoekzema.nl
iactechnologies.net
eventosvirtualesexitosos.com
rvside.com
katherinealy.com
lapponiasafaris.com
advesa.com
pajagus.fr
wasnederland.nl
easydental.ae
lashandbrowenvy.com
triplettabordeaux.fr
christopherhannan.com
grafikstudio-visuell.de
pisofare.co
schluesseldienste-hannover.de
hinotruckwreckers.com.au
lmmont.sk
carolynfriedlander.com
the3-week-diet.net
galaniuklaw.com
casinodepositors.com
bookingwheel.com
digitale-elite.de
campinglaforetdetesse.com
advancedeyecare.com
nykfdyrehospital.dk
polynine.com
akwaba-safaris.com
acb-gruppe.ch
jag.me
scotlandsroute66.co.uk
lollachiro.com
suonenjoen.fi
witraz.pl
latableacrepes-meaux.fr
levencovka.ru
richardmaybury.co.uk
blavait.fr
kerstliedjeszingen.nl
haus-landliebe.de
ravage-webzine.nl
paardcentraal.nl
bayshoreelite.com
ninjaki.com
9nar.com
blueridgeheritage.com
ilveshistoria.com
the-beauty-guides.com
bajova.sk
mahikuchen.com
santastoy.store
direitapernambuco.com
smartspeak.com
koncept-m.ru
grancanariaregional.com
suitesartemis.gr
nicksrock.com
designimage.ae
jimprattmediations.com
phukienbepthanhdat.com
atma.nl
espaciopolitica.com
smartercashsystem.com
explora.nl
kroophold-sjaelland.dk
insane.agency
docarefoundation.org
baita.ac
penumbuhrambutkeiskei.com
blucamp.com
altocontatto.net
hutchstyle.co.uk
c-sprop.com
nationnewsroom.com
vitormmcosta.com
bodet150ans.com
baumfinancialservices.com
craftron.com
karelinjames.com
frankgoll.com
billyoart.com
metcalfe.ca
pays-saint-flour.fr
eshop.design
111firstdelray.com
tramadolhealth.com
queertube.net
rossomattonecase.it
jacquesgarcianoto.com
linkbuilding.life
sambaglow.com
ygallerysalonsoho.com:443
molade.nl
scietech.academy
nepressurecleaning.com
cymru.futbol
heimdalbygg.no
gbk-tp1.de
xtensifi.com
nbva.co.uk
trainiumacademy.com
voetbalhoogeveen.nl
tradenavigator.ch
kvetymichalovce.sk
leansupremegarcinia.net
drbrianhweeks.com
bavovrienden.nl
basindentistry.com
laylavalentine.com
aciscomputers.com
tages-geldvergleich.de
ceocenters.com
yvesdoin-aquarelles.fr
thisprettyhair.com
strauchs-wanderlust.info
stagefxinc.com
cyberpromote.de
universelle.fr
activeterroristwarningcompany.com
placermonticello.com
mediabolmong.com
loysonbryan.com
radishallgood.com
mazift.dk
flossmoordental.com
soundseeing.net
manzel.tn
affligemsehondenschool.be
rhino-turf.com
avtoboss163.ru:443
galatee-couture.com
kamin-somnium.de
racefietsenblog.nl
mindfuelers.com
watchsale.biz
billigeflybilletter.dk
ikadomus.com
banksrl.co.za
levelseven.be
apmollerpension.com
hameghlim.com
signededenroth.dk
mursall.de
mangimirossana.it
christianscholz.de
etgdogz.de
ykobbqchicken.ca
nexstagefinancial.com
leopoldineroux.com
outstandingminialbums.com
mariajosediazdemera.com
bakingismyyoga.com
slideevents.be
look.academy
omnicademy.com
ludoil.it
inewsstar.com
alharsunindo.com
g2mediainc.com
spartamovers.com
harleystreetspineclinic.com
cops4causes.org
baptistdistinctives.org
cincinnatiphotocompany.org
kiraribeaute-nani.com
wrinstitute.org
mjk.digital
banukumbak.com
hospitalitytrainingsolutions.co.uk
dinecorp.com
globalcompliancenews.com
pankiss.ru
sellthewrightway.com
julielusktherapy.com
chainofhopeeurope.eu
onlinetvgroup.com
drnelsonpediatrics.com
transifer.fr
saboboxtel.uk
from02pro.com
schroederschoembs.com
kookooo.com
log-barn.co.uk
landgoedspica.nl
alene.co
1deals.com
startuplive.org
mrmac.com
rs-danmark.dk
dcc-eu.com
parseport.com
focuskontur.com
advance-refle.com
circuit-diagramz.com
kuriero.pro
3daywebs.com
four-ways.com
kickittickets.com
keyboardjournal.com
soncini.ch
thiagoperez.com
burg-zelem.de
tetameble.pl
matthieupetel.fr
keuken-prijs.nl
pixelhealth.net
alcye.com
optigas.com
barbaramcfadyenjewelry.com
pazarspor.org.tr
liverpoolabudhabi.ae
datatri.be
charlottelhanna.com
stage-infirmier.fr
agendatwentytwenty.com
jax-interim-and-projectmanagement.com
ideamode.com
makingmillionaires.net
zealcon.ae
wallflowersandrakes.com
nutriwell.com.sg
olry-cloisons.fr
domaine-des-pothiers.com
boyfriendsgoal.site
bulyginnikitav.000webhostapp.com
ced-elec.com
line-x.co.uk
daveystownhouse.com
hepishopping.com
eyedoctordallas.com
johnstonmingmanning.com
smarttourism.academy
pxsrl.it
o2o-academy.com
qwikcoach.com
production-stills.co.uk
greenrider.nl
kosten-vochtbestrijding.be
palmecophilippines.com
proffteplo.com
11.in.ua
jlwilsonbooks.com
tchernia-conseil.fr
heuvelland-oaze.nl
phoenixcrane.com
global-migrate.com
modamarfil.com
ya-elka.ru
vdolg24.online
skyboundnutrition.co.uk
sshomme.com
kausette.com
silverbird.dk
domilivefurniture.com
breakluckrecords.com
mundo-pieces-auto.fr
xn--billigafrgpatroner-stb.se
mariannelemenestrel.com
imaginekithomes.co.nz
wribrazil.com
vvego.com
cascinarosa33.it
cotton-avenue.co.il
limounie.com
the-cupboard.co.uk
amco.net.au
catalyseurdetransformation.com
amyandzac.com
rhino-storage.co.uk
eos-horlogerie.com
silkeight.com
alltagsrassismus-entknoten.de
nrgvalue.com
fire-space.com
zaczytana.com
yourcosmicbeing.com
oraweb.net
netadultere.fr
carmel-york.com
towelroot.co
switch-made.com
martinipstudios.com
block-optic.com
kombi-dress.com
justaroundthecornerpetsit.com
csaballoons.com
wirmuessenreden.com
pharmeko-group.com
vitoriaecoturismo.com.br
jayfurnitureco.com
azloans.com
ebible.co
gavelmasters.com
girlish.ae
apiarista.de
walterman.es
bubbalucious.com
jeanmonti.com
ingresosextras.online
b3b.ch
egpu.fr
craftstone.co.nz
hotelturbo.de
atelierkomon.com
utilisacteur.fr
diakonie-weitramsdorf-sesslach.de
hotjapaneselesbian.com
cardsandloyalty.com
thehovecounsellingpractice.co.uk
housesofwa.com
trevi-vl.ru
promus.ca
fotoslubna.com
speiserei-hannover.de
johnkoen.com
noda.com.ua
richardiv.com
bohrlochversicherung.info
berdonllp.com
o90.dk
rarefoods.ro
rentingwell.com
welovecustomers.fr
gsconcretecoatings.com
betterce.com
envomask.com
hostastay.com
dr-vita.de
motocrossplace.co.uk
angelika-schwarz.com
skolaprome.eu
rino-gmbh.com
neonodi.be
evsynthacademy.org
fla.se
janellrardon.com
humanviruses.org
zuerich-umzug.ch
comoserescritor.com
jobkiwi.com.ng
thegetawaycollective.com
slotspinner.com
valiant-voice.com
auto-opel.ro
fridakids.com
enews-qca.com
breathebettertolivebetter.com
tesisatonarim.com
reputation-medical.online
dnqa.co.uk
liveyourheartout.co
yournextshoes.com
lexced.com
kompresory-opravy.com
palema.gr
auberives-sur-vareze.fr
springfieldplumbermo.com
patriotcleaning.net
oncarrot.com
duthler.nl
lumturo.academy
toranjtuition.org
indiebizadvocates.org
letterscan.de
deziplan.ru
iexpert99.com
turing.academy
edrickennedymacfoy.com
achetrabalhos.com
citiscapes-art.com
mediogiro.com.ar
rozmata.com
littlesaints.academy
min-virksomhed.dk
selected-minds.de
rtc24.com
endlessrealms.net
singletonfinancial.com
napisat-pismo-gubernatoru.ru:443
handyman-silkeborg.dk
circlecitydj.com
andermattswisswatches.ch
jandhpest.com
bratek-immobilien.de
animation-pro.co.uk
mgimalta.com
simpleitsolutions.ch
stoneridgemontessori.com
vipcarrental.ae
frameshift.it
bagaholics.in
istantidigitali.com
stringnosis.academy
premier-iowa.com
parisschool.ru
cuadc.org
mind2muscle.nl
dibli.store
luvinsburger.fr
bellesiniacademy.org
invela.dk
malzomattalar.com
premiumweb.com.ua:443
floweringsun.org
mediahub.co.nz
ikzoekgod.be
anleggsregisteret.no
catchup-mag.com
michaelfiegel.com
avis.mantova.it
leatherjees.com
raeoflightmusic.com
triavlete.com
vedsegaard.dk
agriturismocastagneto.it
agrifarm.dk
site.markkit.com.br
5thactors.com
purepreprod4.com
aktivfriskcenter.se
leloupblanc.gr
monstarrsoccer.com
advanced-removals.co.uk
bruut.online
allinonecampaign.com
akcadagofis.com
benchbiz.com
bg.szczecin.pl
jobscore.com
autoteamlast.de
kellengatton.com
molinum.pt
redpebblephotography.com
golfclublandgoednieuwkerk.nl
annida.it
thestudio.academy
putzen-reinigen.com
newonestop.com
andreaskildegaard.dk
sololibrerie.it
solutionshosting.co.uk
endstarvation.com
pvandambv.nl
gosouldeep.com
schulz-moelln.de
kristianboennelykke.dk
letsstopsmoking.co.uk
larchwoodmarketing.com
kryddersnapsen.dk
orchardbrickwork.com
-
net
true
-
pid
23
-
prc
ocssd
onenote
dbsnmp
visio
firefox
oracle
mspub
mydesktopservice
xfssvccon
tbirdconfig
synctime
encsvc
ocomm
sqbcoreservice
wordpa
mydesktopqos
outlook
steam
thebat
agntsvc
winword
ocautoupds
infopath
sql
isqlplussvc
msaccess
excel
dbeng50
thunderbird
powerpnt
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
1237
-
svc
veeam
svc$
sophos
mepocs
vss
sql
backup
memtas
Signatures
-
Sodinokibi family
-
Sodinokibi/Revil sample 1 IoCs
Processes:
resource yara_rule sample family_sodinokobi
Files
-
f8b0760d39e57a7c89e66ebb3b254a89ec8bea7793511f7ce71994d9a0946d97.dll windows x86
c4c29c7e6a6897be412c7fedfcca8fe4
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
SetErrorMode
CreateThread
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mfnxy Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ