Static task
static1
Behavioral task
behavioral1
Sample
efbc6216e46433d1fec2b0e4badb237c2fd111f41fcdc5433a17147bb680641a.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
efbc6216e46433d1fec2b0e4badb237c2fd111f41fcdc5433a17147bb680641a.exe
Resource
win10-en-20211208
General
-
Target
efbc6216e46433d1fec2b0e4badb237c2fd111f41fcdc5433a17147bb680641a
-
Size
164KB
-
MD5
927a9c929b70dc597e49e2ff25b55185
-
SHA1
5f271ac5728b6fdbd5f9b23869e5b6320da93c22
-
SHA256
efbc6216e46433d1fec2b0e4badb237c2fd111f41fcdc5433a17147bb680641a
-
SHA512
e64180bc9958c13a628dfe57ddb2598a4450b9c64e1d1ebfcac4fd5f0c4efa2ef23f312895e4dbad5560f1c8c1010b2e3c7f7ba390bfe0e5d790bd1db0540530
-
SSDEEP
3072:WGYFrOdhfkQv9jrAprhFmyvEjQDKaUznxQa+pnPG:QadFkMGhFjED39u
Malware Config
Extracted
sodinokibi
12
1920
der-stempelking.de
factoriareloj.com
hawaiisteelbuilding.com
leopoldineroux.com
smartspeak.com
leatherjees.com
focuskontur.com
pilotgreen.com
worldproskitour.com
ivancacu.com
patriotcleaning.net
relevantonline.eu
lattalvor.com
mjk.digital
tieronechic.com
belinda.af
eatyoveges.com
medicalsupportco.com
zinnystar.com
springfieldplumbermo.com
penumbuhrambutkeiskei.com
skidpiping.de
designimage.ae
coachpreneuracademy.com
skoczynski.eu
hoteltantra.com
quitescorting.com
tbalp.co.uk
bohrlochversicherung.info
avis.mantova.it
directique.com
watchsale.biz
eurethicsport.eu
voice2biz.com
mslp.org
drvoip.com
ketomealprep.academy
xn--80addfr4ahr.dp.ua
leloupblanc.gr
nauticmarine.dk
werkzeugtrolley.net
ebible.co
saint-malo-developpement.fr
endstarvation.com
slotspinner.com
leadforensics.com
magrinya.net
belofloripa.be
amorbellezaysalud.com
catchup-mag.com
witraz.pl
speakaudible.com
fbmagazine.ru
phoenixcrane.com
jlwilsonbooks.com
terraflair.de
premier-iowa.com
dentallabor-luenen.de
basindentistry.com
axisoflove.org:443
graygreenbiomedservices.com
peninggibadan.co.id
charlesfrancis.photos
spartamovers.com
sololibrerie.it
muller.nl
modamarfil.com
benchbiz.com
pxsrl.it
site.markkit.com.br
schluesseldienste-hannover.de
azloans.com
bcmets.info
malevannye.ru
foerderverein-vatterschule.de
vitormmcosta.com
pokemonturkiye.com
9nar.com
production-stills.co.uk
thiagoperez.com
johnstonmingmanning.com
sachainchiuk.com
memphishealthandwellness.com
sharonalbrightdds.com
daveystownhouse.com
carsten.sparen-it.de
the3-week-diet.net
suonenjoen.fi
invela.dk
mesajjongeren.nl
aberdeenartwalk.org
jdscenter.com
ilveshistoria.com
fskhjalmar.se
nrgvalue.com
molinum.pt
malzomattalar.com
utilisacteur.fr
111firstdelray.com
spectamarketingdigital.com.br
billyoart.com
larchwoodmarketing.com
annida.it
baita.ac
cyberpromote.de
mind2muscle.nl
comoserescritor.com
brinkdoepke.eu
nuohous.com
efficiencyconsulting.es
dierenambulancealkmaar.nl
stralsund-ansichten.de
voetbalhoogeveen.nl
victorvictoria.com
schroederschoembs.com
cymru.futbol
rentingwell.com
forskolinslimeffect.net
startuplive.org
dreamvoiceclub.org
nicksrock.com
limmortelyouth.com
ilovefullcircle.com
pinkxgayvideoawards.com
fazagostar.co
hostastay.com
saberconcrete.com
kristianboennelykke.dk
slotenmakerszwijndrecht.nl
condormobile.fr
studionumerik.fr
distrifresh.com
scotlandsroute66.co.uk
so-sage.fr
buerocenter-butzbach-werbemittel.de
optigas.com
wg-heiligenstadt.de
pourlabretagne.bzh
onesynergyinternational.com
agenceassemble.fr
salonlamar.nl
tages-geldvergleich.de
rechtenplicht.be
avtoboss163.ru:443
jaaphoekzema.nl
bumbipdeco.site
jobstomoveamerica.org
acb-gruppe.ch
ijsselbeton.nl
dibli.store
raeoflightmusic.com
prometeyagro.com.ua
brownswoodblog.com
agriturismocastagneto.it
ravage-webzine.nl
banksrl.co.za
narca.net
heimdalbygg.no
buonabitare.com
rsidesigns.com
annenymus.com
adedesign.com
pisofare.co
beandrivingschool.com.au
hospitalitytrainingsolutions.co.uk
orchardbrickwork.com
innervisions-id.com
bellesiniacademy.org
sealgrinderpt.com
lsngroupe.com
energosbit-rp.ru
chomiksy.net
mikegoodfellow.co.uk
ced-elec.com
azerbaycanas.com
concontactodirecto.com
frameshift.it
nbva.co.uk
amyandzac.com
qandmmusiccenter.com
pixelhealth.net
putzen-reinigen.com
zumrutkuyutemel.com
imagine-entertainment.com
thehovecounsellingpractice.co.uk
lookandseen.com
furland.ru
ntinasfiloxenia.gr
goodboyscustom.com
thepixelfairy.com
alltagsrassismus-entknoten.de
nutriwell.com.sg
smarttourism.academy
craftingalegacy.com
unboxtherapy.site
airvapourbarrier.com
guohedd.com
teamsegeln.ch
littlesaints.academy
catering.com
greatofficespaces.net
kosten-vochtbestrijding.be
liveyourheartout.co
jobkiwi.com.ng
apmollerpension.com
test-teleachat.fr
selected-minds.de
finnergo.eu
tradenavigator.ch
cuadc.org
clemenfoto.dk
publicompserver.de
ikzoekgod.be
omegamarbella.com
dentourage.com
baikalflot.ru
alharsunindo.com
kartuindonesia.com
walterman.es
anleggsregisteret.no
campinglaforetdetesse.com
cotton-avenue.co.il
smartworkplaza.com
bagaholics.in
projektparkiet.pl
stressreliefadvice.com
midwestschool.org
cormanmarketing.com
global-migrate.com
lassocrm.com
sppdstats.com
agora-collectivites.com
betterce.com
awag-blog.de
rossomattonecase.it
curtsdiscountguns.com
kelsigordon.com
hepishopping.com
hostingbangladesh.net
ykobbqchicken.ca
theatre-embellie.fr
schlagbohrmaschinetests.com
alpesiberie.com
mediogiro.com.ar
arabianmice.com
michal-s.co.il
patassociation.com
mercadodelrio.com
dinecorp.com
bratek-immobilien.de
ronaldhendriks.nl
carolynfriedlander.com
juergenblaetz.de
tramadolhealth.com
secrets-clubs.co.uk
xn--80abehgab4ak0ddz.xn--p1ai
the-beauty-guides.com
latteswithleslie.com
topautoinsurers.net
soundseeing.net
agrifarm.dk
happylublog.wordpress.com
fluzfluzrewards.com
biodentify.ai
universelle.fr
boyfriendsgoal.site
glende-pflanzenparadies.de
rattanwarehouse.co.uk
eksperdanismanlik.com
haus-landliebe.de
xtensifi.com
photographycreativity.co.uk
breakluckrecords.com
supercarhire.co.uk
uncensoredhentaigif.com
mneti.ru
uci-france.fr
innovationgames-brabant.nl
livelai.com
o90.dk
mindsparkescape.com
kryddersnapsen.dk
subquercy.fr
baptistdistinctives.org
awaisghauri.com
makingmillionaires.net
zwemofficial.nl
metroton.ru
sshomme.com
forumsittard.nl
glennverschueren.be
nykfdyrehospital.dk
thegrinningmanmusical.com
customroasts.com
masecologicos.com
collegetennis.info
bilius.dk
tatyanakopieva.ru
indiebizadvocates.org
katherinealy.com
maryairbnb.wordpress.com
paradigmlandscape.com
corporacionrr.com
brighthillgroup.com
kamin-somnium.de
cainlaw-okc.com
scietech.academy
smartmind.net
breathebettertolivebetter.com
lisa-poncon.fr
oraweb.net
outstandingminialbums.com
polynine.com
bookingwheel.com
galaniuklaw.com
justaroundthecornerpetsit.com
atrgroup.it
vitoriaecoturismo.com.br
silverbird.dk
wrinstitute.org
wademurray.com
awaitspain.com
precisetemp.com
csaballoons.com
wribrazil.com
weddingceremonieswithtim.com
brunoimmobilier.com
ygallerysalonsoho.com:443
bodymindchallenger.com
theboardroomafrica.com
internestdigital.com
queertube.net
taulunkartano.fi
arthakapitalforvaltning.dk
ncjc.ca
cxcompany.com
chorusconsulting.net
electricianul.com
photonag.com
imaginekithomes.co.nz
transifer.fr
biketruck.de
julielusktherapy.com
koncept-m.ru
epsondriversforwindows.com
cssp-mediation.org
altitudeboise.com
cascinarosa33.it
t3brothers.com
powershell.su
ciga-france.fr
scentedlair.com
spirello.nl
rentsportsequip.com
nginx.com
autoteamlast.de
solidhosting.nl
jandhpest.com
aktivfriskcenter.se
globalskills.pt
trivselsguide.dk
luvinsburger.fr
andreaskildegaard.dk
monstarrsoccer.com
glas-kuck.de
k-v-f.de
hiddensee-buhne11.de
janellrardon.com
letsstopsmoking.co.uk
racefietsenblog.nl
bjornvanvulpen.nl
georgemuncey.com
insane.agency
eshop.design
imajyuku-sozoku.com
the-cupboard.co.uk
adabible.org
reputation-medical.online
alene.co
gurutechnologies.net
line-x.co.uk
arazi.eus
funworx.de
stage-infirmier.fr
levencovka.ru
mariamalmahdi.com
chainofhopeeurope.eu
apogeeconseils.fr
ronielyn.com
akwaba-safaris.com
citiscapes-art.com
natturestaurante.com.br
irizar.com
n-newmedia.de
skyboundnutrition.co.uk
askstaffing.com
burg-zelem.de
alabamaroofingllc.com
auberives-sur-vareze.fr
reygroup.pt
the5thquestion.com
sytzedevries.com
pedmanson.com
gazelle-du-web.com
almamidwifery.com
goddardleadership.org
circlecitydj.com
primemarineengineering.com
singletonfinancial.com
deziplan.ru
scholarquotes.com
jefersonalessandro.com
carmel-york.com
suitesartemis.gr
topvijesti.net
gbk-tp1.de
oportowebdesign.com
renderbox.ch
mazift.dk
alexwenzel.de
pharmeko-group.com
atma.nl
mediahub.co.nz
housesofwa.com
clinic-beethovenstrasse-ag.ch
skooppi.fi
etgdogz.de
switch-made.com
skinkeeper.li
tilldeeke.de
dnqa.co.uk
luvbec.com
bertbutter.nl
christianscholz.de
rarefoods.ro
martinipstudios.com
santastoy.store
aoyama.ac
teutoradio.de
unexplored.gr
thesilkroadny.com
domilivefurniture.com
jameswilliamspainting.com
flossmoordental.com
nxtstg.org
soncini.ch
promus.ca
istantidigitali.com
zorgboerderijravensbosch.nl
boloria.de
geoweb.software
bruut.online
1deals.com
unislaw-narty.pl
yayasanprimaunggul.org
lmmont.sk
cincinnatiphotocompany.org
kemtron.fr
allinonecampaign.com
sbit.ag
wirmuessenreden.com
theater-lueneburg.de
naukaip.ru
berdonllp.com
rhino-turf.com
bundan.com
advesa.com
cl0nazepamblog.com
techybash.com
prodentalblue.com
baumfinancialservices.com
hekecrm.com
jimprattmediations.com
christopherhannan.com
dentalcircle.com
digitale-elite.de
activeterroristwarningcompany.com
denverwynkoopdentist.com
qrs-international.com
gatlinburgcottage.com
aslog.fr
alwaysdc.com
sellthewrightway.com
tastevirginia.com
janmorgenstern.com
endlessrealms.net
descargandoprogramas.com
metallbau-hartmann.eu
michaelfiegel.com
licensed-public-adjuster.com
angelika-schwarz.com
profibersan.com
thegetawaycollective.com
mariannelemenestrel.com
jmmartinezilustrador.com
rename.kz
ahgarage.com
gta-jjb.fr
ruggestar.ch
geitoniatonaggelon.gr
encounter-p.net
3daywebs.com
mondolandscapes.com
matthieupetel.fr
kellengatton.com
rubyaudiology.com
rizplakatjaya.com
animalfood-online.de
qwikcoach.com
catalyseurdetransformation.com
trevi-vl.ru
paardcentraal.nl
wasnederland.nl
johnkoen.com
zuerich-umzug.ch
stagefxinc.com
fascaonline.com
motocrosshideout.com
lapponiasafaris.com
blucamp.com
valiant-voice.com
tzn.nu
antesacademy.it
stabilisateur.fr
bluetenreich-brilon.de
miscbo.it
web865.com
nvisionsigns.com
ramirezprono.com
agencewho-aixenprovence.fr
marcandy.com
amelielecompte.wordpress.com
noda.com.ua
enactusnhlstenden.com
envomask.com
kdbrh.com
eos-horlogerie.com
jonnyhooley.com
bg.szczecin.pl
augen-praxisklinik-rostock.de
datatri.be
opt4cdi.com
go.labibini.ch
lovetzuchia.com
tetameble.pl
g2mediainc.com
sjtpo.org
block-optic.com
harleystreetspineclinic.com
bulyginnikitav.000webhostapp.com
pansionatblago.ru
cc-experts.de
albcleaner.fr
iron-mine.ru
mrmac.com
bmw-i-pure-impulse.com
parseport.com
nalliasmali.net
alnectus.com
hypogenforensic.com
interlinkone.com
centuryvisionglobal.com
saboboxtel.uk
operativadigital.com
molade.nl
bcabattoirs.org
ledyoucan.com
lexced.com
log-barn.co.uk
dayenne-styling.nl
creohn.de
from02pro.com
stoneridgemontessori.com
elliemaccreative.wordpress.com
grupoexin10.com
achetrabalhos.com
rino-gmbh.com
kenmccallum.com
brannbornfastigheter.se
andrealuchesi.it
rolleepollee.com
c-sprop.com
poems-for-the-soul.ch
angelsmirrorus.com
mbuildinghomes.com
mursall.de
linkbuilding.life
jakubrybak.com
jobscore.com
lgiwines.com
craftron.com
bendel-partner.de
oscommunity.de
sber-biznes.com
jalkapuu.net
k-zubki.ru
fsbforsale.com
schulz-moelln.de
aciscomputers.com
neolaiamedispa.com
morgansconsult.com
spacebel.be
yourcosmicbeing.com
skyscanner.ro
ziliak.com
profiz.com
golfclublandgoednieuwkerk.nl
kompresory-opravy.com
m2graph.fr
babysitting-hk.helpergo.co
elex.is
dantreranch.com
triplettabordeaux.fr
bakingismyyoga.com
volta.plus
mangimirossana.it
billigeflybilletter.dk
blueridgeheritage.com
globalcompliancenews.com
edvestors.org
subyard.com
lidkopingsnytt.nu
frankgoll.com
karelinjames.com
johnsonweekly.com
egpu.fr
sycamoregreenapts.com
deduktia.fi
richardkershawwines.co.za
zdrowieszczecin.pl
airserviceunlimited.com
onlinemarketingsurgery.co.uk
cp-bap.de
campusce.com
lumturo.academy
turing.academy
cmeow.com
ideamode.com
yournextshoes.com
devplus.be
claudiakilian.de
dcc-eu.com
kiraribeaute-nani.com
redpebblephotography.com
shrinkingplanet.com
muni.pe
fanuli.com.au
advanced-removals.co.uk
jax-interim-and-projectmanagement.com
citydogslife.com
kafkacare.com
lagschools.ng
hotjapaneselesbian.com
legundschiess.de
birthplacemag.com
cap29010.it
stitch-n-bitch.com
simpleitsolutions.ch
cesep2019.com
forextimes.ru
ddmgen.com
levelseven.be
rozmata.com
bd2fly.com
rvside.com
mazzaropi.com.br
liverpoolabudhabi.ae
direitapernambuco.com
aquacheck.co.za
rishigangoly.com
affligemsehondenschool.be
gaearoyals.com
denhaagfoodie.nl
mgimalta.com
amco.net.au
acumenconsultingcompany.com
alattekniksipil.com
eyedoctordallas.com
fotoslubna.com
bescomedical.de
bringmehope.org
rhino-storage.co.uk
fann.ru
nexstagefinancial.com
cmascd.com
acibademmobil.com.tr
kombi-dress.com
placermonticello.com
signamedia.de
kuriero.pro
moira-cristescu.com
khtrx.com
dr-vita.de
elitkeramika-shop.com.ua
galatee-couture.com
nationnewsroom.com
whoopingcrane.com
lunoluno.com
groovedealers.ru
myplaywin3.com
purepreprod4.com
gardenpartner.pl
skolaprome.eu
agendatwentytwenty.com
thisprettyhair.com
eastgrinsteadwingchun.com
business-basic.de
mensemetgesigte.co.za
kvetymichalovce.sk
wineandgo.hu
sunsolutions.es
o2o-academy.com
motocrossplace.co.uk
11.in.ua
neonodi.be
hnkns.com
floweringsun.org
min-virksomhed.dk
sveneulberg.de
perfectgrin.com
fi-institutionalfunds.com
pro-gamer.pl
expohomes.com
chinowarehousespace.com
nieuwsindeklas.be
palmecophilippines.com
mamajenedesigns.com
logosindustries.com
eafx.pro
explora.nl
bavovrienden.nl
bluelakevision.com
fixx-repair.com
texanscan.org
cardsandloyalty.com
buffdaddyblog.com
kookooo.com
piestar.com
keyboardjournal.com
ultimatelifesource.com
paprikapod.com
colored-shelves.com
goodherbalhealth.com
tutvracks.com
trainiumacademy.com
diverfiestas.com.es
aceroprime.com
devus.de
eventosvirtualesexitosos.com
perceptdecor.com
heuvelland-oaze.nl
greenrider.nl
boomerslivinglively.com
b3b.ch
pinthelook.com
initconf.com
margaretmcshane.com
jlgraphisme.fr
5pointpt.com
signededenroth.dk
ufovidmag.com
sprintcoach.com
enews-qca.com
ox-home.com
chris-anne.com
nepal-pictures.com
zealcon.ae
otpusk.zp.ua
yourhappyevents.fr
keuken-prijs.nl
aheadloftladders.co.uk
donau-guides.eu
dogsunlimitedguide.com
haard-totaal.nl
solutionshosting.co.uk
lashandbrowenvy.com
buzzneakers.com
factorywizuk.com
cops4causes.org
jollity.hu
dennisverschuur.com
proffteplo.com
advancedeyecare.com
evsynthacademy.org
renehartman.nl
sweetz.fr
charlottelhanna.com
leansupremegarcinia.net
toranjtuition.org
drbrianhweeks.com
ya-elka.ru
alisodentalcare.com
leijstrom.com
olry-cloisons.fr
pubcon.com
oncarrot.com
martha-frets-ceramics.nl
metcalfe.ca
jeanmonti.com
fitnessblenderstory.com
happycatering.de
internalresults.com
nourella.com
finsahome.co.uk
mieleshopping.it
richardmaybury.co.uk
lyricalduniya.com
acornishstudio.co.uk
ceocenters.com
futurenetworking.com
barbaramcfadyenjewelry.com
cleanroomequipment.ie
wordpress.idium.no
mike.matthies.de
limounie.com
kickittickets.com
drnelsonpediatrics.com
oexebusiness.com
fotoeditores.com
artvark.nl
wyreforest.net
kerstliedjeszingen.nl
bonitabeachassociation.com
vipcarrental.ae
fridakids.com
peppergreenfarmcatering.com.au
bychowo.pl
testitjavertailut.net
greeneyetattoo.com
innersurrection.com
easydental.ae
cookinn.nl
specialtyhomeservicesllc.com
tweedekansenloket.nl
palmenhaus-erfurt.de
dieetuniversiteit.nl
mariajosediazdemera.com
rs-danmark.dk
laaisterplakky.nl
silkeight.com
parksideseniorliving.net
husetsanitas.dk
tothebackofthemoon.com
randyabrown.com
welovecustomers.fr
xn--billigafrgpatroner-stb.se
adterium.com
astrographic.com
fta-media.com
veggienessa.com
oro.ae
inewsstar.com
campusescalade.com
livedeveloper.com
satoblog.org
duthler.nl
look.academy
fla.se
bourchier.org
handyman-silkeborg.dk
hartofurniture.com
riffenmattgarage.ch
traitware.com
newonestop.com
latableacrepes-meaux.fr
redctei.co
fidelitytitleoregon.com
chatterchatterchatter.com
blavait.fr
espaciopolitica.com
myfbateam.com
banukumbak.com
napisat-pismo-gubernatoru.ru:443
sarahspics.co.uk
ocduiblog.com
vvego.com
pays-saint-flour.fr
wallflowersandrakes.com
2020hindsight.info
gosouldeep.com
protoplay.ca
aidanpublishing.co.uk
craftstone.co.nz
towelroot.co
mediabolmong.com
mac-computer-support-hamburg.de
ayudaespiritualtamara.com
tellthebell.website
akcadagofis.com
nepressurecleaning.com
asiaartgallery.jp
5thactors.com
verbouwingsdouche.nl
broccolisoep.nl
pazarspor.org.tr
iactechnologies.net
parentsandkids.com
brisbaneosteopathic.com.au
delegationhub.com
domaine-des-pothiers.com
jag.me
90nguyentuan.com
reizenmetkinderen.be
bubbalucious.com
theintellect.edu.pk
sambaglow.com
mundo-pieces-auto.fr
matteoruzzaofficial.com
artcase.pl
smartercashsystem.com
edrickennedymacfoy.com
bayshoreelite.com
jayfurnitureco.com
die-immo-agentur.de
successcolony.com.ng
jglconsultancy.com
onlinetvgroup.com
epicjapanart.com
hotelturbo.de
speiserei-hannover.de
ownidentity.com
lovcase.com
parisschool.ru
holocine.de
palema.gr
animation-pro.co.uk
webforsites.com
anchelor.com
drbenveniste.com
plbinsurance.com
entdoctor-durban.com
louiedager.com
atelierkomon.com
jacquesgarcianoto.com
laylavalentine.com
rivermusic.nl
lifeinbreaths.com
pureelements.nl
tecleados.com
rtc24.com
hensleymarketing.com
kryptos72.com
strauchs-wanderlust.info
angeleyezstripclub.com
marmarabasin.com
thestudio.academy
omnicademy.com
bajova.sk
circuit-diagramz.com
bodet150ans.com
loysonbryan.com
markseymourphotography.co.uk
lollachiro.com
hostaletdelsindians.es
itheroes.dk
mustangmarketinggroup.com
framemyballs.com
stringnosis.academy
shortsalemap.com
mindfuelers.com
vapiano.fr
opticahubertruiz.com
hinotruckwreckers.com.au
docarefoundation.org
mrcar.nl
auto-opel.ro
letterscan.de
mollymccarthydesign.com
andermattswisswatches.ch
maxcube24.com.ua
biblica.com
professionetata.com
gsconcretecoatings.com
stathmoulis.gr
vdolg24.online
sochi-okna23.ru
manzel.tn
fysiotherapierijnmond.nl
crestgood.com
xn--ziinoapte-6ld.ro
abulanov.com
liepertgrafikweb.at
computer-place.de
arearugcleaningnyc.com
pankiss.ru
triplettagaite.fr
lesyeuxbleus.net
billscars.net
frimec-international.es
pvandambv.nl
ludoil.it
bridalcave.com
hawthornsretirement.co.uk
tchernia-conseil.fr
hom-frisor.dk
kausette.com
apiarista.de
mahikuchen.com
alaskaremote.com
yvesdoin-aquarelles.fr
magnetvisual.com
adaduga.info
alcye.com
davedavisphotos.com
klapanvent.ru
iexpert99.com
radishallgood.com
karmeliterviertel.com
ikadomus.com
beauty-traveller.com
grancanariaregional.com
hvitfeldt.dk
premiumweb.com.ua:443
tanatek.com
triavlete.com
nevadaruralhousingstudies.org
vedsegaard.dk
ninjaki.com
advance-refle.com
avisioninthedesert.com
xrresources.com
a-zpaperwork.eu
hutchstyle.co.uk
gavelmasters.com
cac2040.com
tesisatonarim.com
physio-lang.de
druktemakersheerenveen.nl
oththukaruva.com
afbudsrejserallinclusive.dk
gratiocafeblog.wordpress.com
diakonie-weitramsdorf-sesslach.de
yuanshenghotel.com
ingresosextras.online
loparnille.se
altocontatto.net
goeppinger-teppichreinigung.de
thenalpa.com
rokthetalk.com
shortysspices.com
metriplica.academy
humanviruses.org
janasfokus.com
slideevents.be
girlish.ae
mayprogulka.ru
grafikstudio-visuell.de
pajagus.fr
kroophold-sjaelland.dk
richardiv.com
krishnabrawijaya.com
landgoedspica.nl
ncn.nl
therapybusinessacademy.com
fire-space.com
hm-com.com
rapid5kloan.org
teethinadaydentalimplants.com
stanleyqualitysystems.com
netadultere.fr
zaczytana.com
bluemarinefoundation.com
dinedrinkdetroit.com
chatberlin.de
four-ways.com
mrkluttz.com
dmlcpa.com
linearete.com
phukienbepthanhdat.com
osn.ro
casinodepositors.com
hameghlim.com
p-ride.live
-
net
false
-
pid
12
-
prc
ocomm
ocautoupds
dbeng50
dbs
qb
outlook
mspub
oracle
core
sage
sql
powerpnt
visio
mydesktopqos
svc$
msaccess
onenote
java
exchange
ssms
w3wp
excel
ax32
crm
srv
pos
store
infopath
synctime
ocssd
sophos
thunderbird
xfssvccon
word
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
1920
-
svc
quickbooks
exchange
vss
sophos
crm
backup
sql
mepocs
qb
svc$
oracle
veeam
pos
memtas
sage
Signatures
-
Sodinokibi family
Files
-
efbc6216e46433d1fec2b0e4badb237c2fd111f41fcdc5433a17147bb680641a.exe windows x86
c88f20b29592f2107a629e815db6afae
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.z2iai Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ