Static task
static1
Behavioral task
behavioral1
Sample
ff61085ff157ef0a98ab65a5343e65637ee24e12cac3b418e45532fc2747f3e5.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
ff61085ff157ef0a98ab65a5343e65637ee24e12cac3b418e45532fc2747f3e5.exe
Resource
win10-en-20211208
General
-
Target
ff61085ff157ef0a98ab65a5343e65637ee24e12cac3b418e45532fc2747f3e5
-
Size
160KB
-
MD5
093ba63d72c22e898bc85f253abc92e3
-
SHA1
cb1416b06c8f8ae887482bd664f77d1448f215a0
-
SHA256
ff61085ff157ef0a98ab65a5343e65637ee24e12cac3b418e45532fc2747f3e5
-
SHA512
621680af977d9b9b9cad2a7e6eb12e294f4051b74194651d7314cee3304b9b048f6b11642654821cc143a88834efda0637dfa0cd82f169034a82fc97f7cc2029
-
SSDEEP
1536:LzE8ZQwf8u+MM3PqBmD9PVpVO0Aj7Pbi4eTMluxtXDCntTnICS4Ag9JbMedaVM+:Kt38mD9P3ILbi4eTMlwDCnumjY5l1U
Malware Config
Extracted
sodinokibi
28
162
legundschiess.de
fskhjalmar.se
nepressurecleaning.com
toranjtuition.org
ddmgen.com
brinkdoepke.eu
arearugcleaningnyc.com
nieuwsindeklas.be
margaretmcshane.com
pajagus.fr
whoopingcrane.com
buonabitare.com
nxtstg.org
liveyourheartout.co
ketomealprep.academy
netadultere.fr
creohn.de
glas-kuck.de
maxcube24.com.ua
latableacrepes-meaux.fr
valiant-voice.com
pinthelook.com
hawaiisteelbuilding.com
deziplan.ru
sambaglow.com
therapybusinessacademy.com
cotton-avenue.co.il
augen-praxisklinik-rostock.de
fann.ru
makingmillionaires.net
gaearoyals.com
hostaletdelsindians.es
paradigmlandscape.com
autoteamlast.de
itheroes.dk
victorvictoria.com
distrifresh.com
markseymourphotography.co.uk
rizplakatjaya.com
aquacheck.co.za
justaroundthecornerpetsit.com
lattalvor.com
fbmagazine.ru
bychowo.pl
tutvracks.com
cl0nazepamblog.com
bluetenreich-brilon.de
90nguyentuan.com
global-migrate.com
saberconcrete.com
alwaysdc.com
dentalcircle.com
thepixelfairy.com
ygallerysalonsoho.com:443
theboardroomafrica.com
bjornvanvulpen.nl
internestdigital.com
azerbaycanas.com
bmw-i-pure-impulse.com
cap29010.it
janmorgenstern.com
johnsonweekly.com
buerocenter-butzbach-werbemittel.de
putzen-reinigen.com
cleanroomequipment.ie
uncensoredhentaigif.com
oraweb.net
duthler.nl
eshop.design
endstarvation.com
interlinkone.com
yvesdoin-aquarelles.fr
schlagbohrmaschinetests.com
rozmata.com
masecologicos.com
gsconcretecoatings.com
andrealuchesi.it
lisa-poncon.fr
onlinetvgroup.com
kompresory-opravy.com
brannbornfastigheter.se
catalyseurdetransformation.com
onesynergyinternational.com
perfectgrin.com
donau-guides.eu
ced-elec.com
bumbipdeco.site
phoenixcrane.com
bohrlochversicherung.info
triplettagaite.fr
kdbrh.com
rivermusic.nl
wrinstitute.org
pro-gamer.pl
finnergo.eu
jobscore.com
hom-frisor.dk
lifeinbreaths.com
ikadomus.com
manzel.tn
golfclublandgoednieuwkerk.nl
eurethicsport.eu
1deals.com
awaitspain.com
kenmccallum.com
vedsegaard.dk
stanleyqualitysystems.com
four-ways.com
advancedeyecare.com
mindsparkescape.com
goddardleadership.org
lassocrm.com
sbit.ag
factorywizuk.com
bilius.dk
bcmets.info
outstandingminialbums.com
theater-lueneburg.de
lookandseen.com
photographycreativity.co.uk
efficiencyconsulting.es
directique.com
look.academy
c-sprop.com
ronielyn.com
alene.co
forextimes.ru
ludoil.it
muni.pe
ncn.nl
digitale-elite.de
haus-landliebe.de
xn--80addfr4ahr.dp.ua
sprintcoach.com
oscommunity.de
stoneridgemontessori.com
larchwoodmarketing.com
unboxtherapy.site
molade.nl
foerderverein-vatterschule.de
docarefoundation.org
jdscenter.com
endlessrealms.net
o90.dk
biketruck.de
palmenhaus-erfurt.de
eastgrinsteadwingchun.com
hutchstyle.co.uk
letsstopsmoking.co.uk
thiagoperez.com
mazift.dk
akcadagofis.com
julielusktherapy.com
ya-elka.ru
atrgroup.it
atma.nl
heuvelland-oaze.nl
angelsmirrorus.com
rino-gmbh.com
descargandoprogramas.com
nauticmarine.dk
scietech.academy
belinda.af
jefersonalessandro.com
gardenpartner.pl
greeneyetattoo.com
cmeow.com
bendel-partner.de
alnectus.com
osn.ro
bourchier.org
campinglaforetdetesse.com
tothebackofthemoon.com
limounie.com
mneti.ru
kosten-vochtbestrijding.be
polynine.com
eksperdanismanlik.com
tanatek.com
dibli.store
kickittickets.com
graygreenbiomedservices.com
hekecrm.com
gatlinburgcottage.com
thegetawaycollective.com
operativadigital.com
barbaramcfadyenjewelry.com
nevadaruralhousingstudies.org
jobkiwi.com.ng
agriturismocastagneto.it
bajova.sk
oportowebdesign.com
geoweb.software
davedavisphotos.com
teethinadaydentalimplants.com
kartuindonesia.com
rhino-turf.com
craftron.com
ahgarage.com
csaballoons.com
matthieupetel.fr
proffteplo.com
alaskaremote.com
techybash.com
sealgrinderpt.com
katherinealy.com
turing.academy
lidkopingsnytt.nu
hinotruckwreckers.com.au
aceroprime.com
k-v-f.de
tradenavigator.ch
artvark.nl
oro.ae
nutriwell.com.sg
startuplive.org
signamedia.de
ncjc.ca
bagaholics.in
marmarabasin.com
auberives-sur-vareze.fr
memphishealthandwellness.com
annida.it
hotjapaneselesbian.com
innervisions-id.com
cymru.futbol
hiddensee-buhne11.de
mgimalta.com
circuit-diagramz.com
axisoflove.org:443
chatterchatterchatter.com
cuadc.org
diakonie-weitramsdorf-sesslach.de
agendatwentytwenty.com
greatofficespaces.net
sytzedevries.com
denverwynkoopdentist.com
astrographic.com
metriplica.academy
sveneulberg.de
yourcosmicbeing.com
mrkluttz.com
alltagsrassismus-entknoten.de
patriotcleaning.net
grancanariaregional.com
billigeflybilletter.dk
andermattswisswatches.ch
trevi-vl.ru
blavait.fr
holocine.de
kuriero.pro
peninggibadan.co.id
johnstonmingmanning.com
tages-geldvergleich.de
profibersan.com
apmollerpension.com
finsahome.co.uk
hameghlim.com
metallbau-hartmann.eu
thesilkroadny.com
vapiano.fr
tilldeeke.de
cxcompany.com
site.markkit.com.br
primemarineengineering.com
arabianmice.com
stathmoulis.gr
spirello.nl
soundseeing.net
yayasanprimaunggul.org
hepishopping.com
thenalpa.com
uci-france.fr
lyricalduniya.com
myfbateam.com
wg-heiligenstadt.de
latteswithleslie.com
renehartman.nl
grupoexin10.com
gratiocafeblog.wordpress.com
mediabolmong.com
bayshoreelite.com
groovedealers.ru
medicalsupportco.com
globalskills.pt
jollity.hu
alattekniksipil.com
denhaagfoodie.nl
shortsalemap.com
leopoldineroux.com
singletonfinancial.com
cainlaw-okc.com
kiraribeaute-nani.com
pokemonturkiye.com
rolleepollee.com
smartmind.net
adabible.org
awaisghauri.com
9nar.com
broccolisoep.nl
bodet150ans.com
traitware.com
berdonllp.com
activeterroristwarningcompany.com
linearete.com
gbk-tp1.de
deduktia.fi
mondolandscapes.com
awag-blog.de
jaaphoekzema.nl
hypogenforensic.com
circlecitydj.com
mahikuchen.com
spectamarketingdigital.com.br
georgemuncey.com
abulanov.com
ocduiblog.com
betterce.com
ciga-france.fr
janasfokus.com
edrickennedymacfoy.com
reizenmetkinderen.be
istantidigitali.com
baptistdistinctives.org
quitescorting.com
jimprattmediations.com
projektparkiet.pl
thehovecounsellingpractice.co.uk
mamajenedesigns.com
otpusk.zp.ua
energosbit-rp.ru
subquercy.fr
brunoimmobilier.com
dieetuniversiteit.nl
jobstomoveamerica.org
patassociation.com
aslog.fr
grafikstudio-visuell.de
malevannye.ru
direitapernambuco.com
ingresosextras.online
watchsale.biz
mind2muscle.nl
eafx.pro
bookingwheel.com
2020hindsight.info
pxsrl.it
charlesfrancis.photos
saboboxtel.uk
alisodentalcare.com
innovationgames-brabant.nl
raeoflightmusic.com
linkbuilding.life
motocrosshideout.com
rtc24.com
arthakapitalforvaltning.dk
opticahubertruiz.com
clinic-beethovenstrasse-ag.ch
neonodi.be
nourella.com
ownidentity.com
cookinn.nl
billscars.net
texanscan.org
cc-experts.de
pedmanson.com
skolaprome.eu
agora-collectivites.com
scotlandsroute66.co.uk
napisat-pismo-gubernatoru.ru:443
lmmont.sk
leatherjees.com
hnkns.com
lovetzuchia.com
rarefoods.ro
carolynfriedlander.com
annenymus.com
frankgoll.com
epicjapanart.com
acb-gruppe.ch
ziliak.com
reputation-medical.online
adedesign.com
gazelle-du-web.com
jandhpest.com
angelika-schwarz.com
der-stempelking.de
slotspinner.com
anleggsregisteret.no
skinkeeper.li
richardiv.com
christopherhannan.com
enews-qca.com
schluesseldienste-hannover.de
vvego.com
amco.net.au
littlesaints.academy
jakubrybak.com
motocrossplace.co.uk
iron-mine.ru
marcandy.com
mazzaropi.com.br
lollachiro.com
pankiss.ru
so-sage.fr
business-basic.de
topvijesti.net
aktivfriskcenter.se
malzomattalar.com
geitoniatonaggelon.gr
bringmehope.org
amorbellezaysalud.com
lagschools.ng
elitkeramika-shop.com.ua
mikegoodfellow.co.uk
imajyuku-sozoku.com
specialtyhomeservicesllc.com
dinedrinkdetroit.com
epsondriversforwindows.com
jonnyhooley.com
innersurrection.com
springfieldplumbermo.com
stringnosis.academy
craftstone.co.nz
imagine-entertainment.com
furland.ru
breakluckrecords.com
pisofare.co
secrets-clubs.co.uk
terraflair.de
web865.com
glennverschueren.be
orchardbrickwork.com
adaduga.info
modamarfil.com
mrmac.com
colored-shelves.com
centuryvisionglobal.com
logosindustries.com
soncini.ch
bertbutter.nl
nrgvalue.com
tramadolhealth.com
goeppinger-teppichreinigung.de
almamidwifery.com
iactechnologies.net
11.in.ua
claudiakilian.de
levelseven.be
rs-danmark.dk
ruggestar.ch
iexpert99.com
vitoriaecoturismo.com.br
ykobbqchicken.ca
spartamovers.com
nexstagefinancial.com
enactusnhlstenden.com
xn--ziinoapte-6ld.ro
zorgboerderijravensbosch.nl
breathebettertolivebetter.com
achetrabalhos.com
racefietsenblog.nl
mursall.de
smartspeak.com
eos-horlogerie.com
forskolinslimeffect.net
successcolony.com.ng
mercadodelrio.com
pixelhealth.net
christianscholz.de
rsidesigns.com
bluelakevision.com
evsynthacademy.org
xn--billigafrgpatroner-stb.se
edvestors.org
acornishstudio.co.uk
3daywebs.com
strauchs-wanderlust.info
frimec-international.es
nuohous.com
inewsstar.com
protoplay.ca
handyman-silkeborg.dk
penumbuhrambutkeiskei.com
production-stills.co.uk
imaginekithomes.co.nz
olry-cloisons.fr
rentingwell.com
block-optic.com
sppdstats.com
dinecorp.com
customroasts.com
ceocenters.com
palmecophilippines.com
slotenmakerszwijndrecht.nl
onlinemarketingsurgery.co.uk
mensemetgesigte.co.za
palema.gr
dantreranch.com
aidanpublishing.co.uk
wallflowersandrakes.com
atelierkomon.com
nbva.co.uk
simpleitsolutions.ch
theatre-embellie.fr
citydogslife.com
prometeyagro.com.ua
schulz-moelln.de
the5thquestion.com
alexwenzel.de
pays-saint-flour.fr
domilivefurniture.com
goodboyscustom.com
designimage.ae
dr-vita.de
towelroot.co
kerstliedjeszingen.nl
smartworkplaza.com
karmeliterviertel.com
sololibrerie.it
log-barn.co.uk
martinipstudios.com
collegetennis.info
kvetymichalovce.sk
miscbo.it
go.labibini.ch
lexced.com
coachpreneuracademy.com
ledyoucan.com
bakingismyyoga.com
initconf.com
eatyoveges.com
stitch-n-bitch.com
verbouwingsdouche.nl
dayenne-styling.nl
curtsdiscountguns.com
spacebel.be
advance-refle.com
hawthornsretirement.co.uk
werkzeugtrolley.net
volta.plus
ayudaespiritualtamara.com
lashandbrowenvy.com
wasnederland.nl
bridalcave.com
charlottelhanna.com
neolaiamedispa.com
yournextshoes.com
premier-iowa.com
albcleaner.fr
wineandgo.hu
yourhappyevents.fr
girlish.ae
rubyaudiology.com
encounter-p.net
sharonalbrightdds.com
fta-media.com
happylublog.wordpress.com
fazagostar.co
loysonbryan.com
chris-anne.com
kelsigordon.com
tetameble.pl
bd2fly.com
insane.agency
solidhosting.nl
powershell.su
agrifarm.dk
drbenveniste.com
hostingbangladesh.net
myplaywin3.com
catering.com
electricianul.com
voice2biz.com
nicksrock.com
ideamode.com
elliemaccreative.wordpress.com
limmortelyouth.com
fascaonline.com
acibademmobil.com.tr
oncarrot.com
aoyama.ac
kamin-somnium.de
wirmuessenreden.com
skyboundnutrition.co.uk
photonag.com
selected-minds.de
riffenmattgarage.ch
silkeight.com
campusce.com
xtensifi.com
natturestaurante.com.br
die-immo-agentur.de
ramirezprono.com
askstaffing.com
radishallgood.com
plbinsurance.com
vdolg24.online
dmlcpa.com
schroederschoembs.com
koncept-m.ru
maryairbnb.wordpress.com
hvitfeldt.dk
newonestop.com
klapanvent.ru
metroton.ru
anchelor.com
111firstdelray.com
t3brothers.com
richardmaybury.co.uk
stressreliefadvice.com
leansupremegarcinia.net
redpebblephotography.com
rename.kz
b3b.ch
bundan.com
affligemsehondenschool.be
kookooo.com
mslp.org
mbuildinghomes.com
nvisionsigns.com
thisprettyhair.com
mangimirossana.it
carmel-york.com
dierenambulancealkmaar.nl
avisioninthedesert.com
devplus.be
subyard.com
bellesiniacademy.org
condormobile.fr
voetbalhoogeveen.nl
vitormmcosta.com
advesa.com
unislaw-narty.pl
santastoy.store
cmascd.com
ilovefullcircle.com
forumsittard.nl
thegrinningmanmusical.com
ravage-webzine.nl
eyedoctordallas.com
luvbec.com
pvandambv.nl
suitesartemis.gr
mundo-pieces-auto.fr
kryptos72.com
hostastay.com
pinkxgayvideoawards.com
beandrivingschool.com.au
vipcarrental.ae
brighthillgroup.com
laaisterplakky.nl
agencewho-aixenprovence.fr
zaczytana.com
fanuli.com.au
galaniuklaw.com
juergenblaetz.de
aberdeenartwalk.org
harleystreetspineclinic.com
hotelturbo.de
cormanmarketing.com
lovcase.com
switch-made.com
tzn.nu
jmmartinezilustrador.com
dentallabor-luenen.de
aheadloftladders.co.uk
campusescalade.com
buzzneakers.com
zdrowieszczecin.pl
gta-jjb.fr
walterman.es
5thactors.com
drbrianhweeks.com
omnicademy.com
focuskontur.com
trainiumacademy.com
fotoeditores.com
espaciopolitica.com
opt4cdi.com
keuken-prijs.nl
paprikapod.com
ebible.co
bubbalucious.com
husetsanitas.dk
crestgood.com
phukienbepthanhdat.com
entdoctor-durban.com
pharmeko-group.com
mollymccarthydesign.com
mariajosediazdemera.com
housesofwa.com
dcc-eu.com
brownswoodblog.com
solutionshosting.co.uk
teutoradio.de
fire-space.com
zinnystar.com
n-newmedia.de
leadforensics.com
chorusconsulting.net
tesisatonarim.com
placermonticello.com
signededenroth.dk
airserviceunlimited.com
amyandzac.com
andreaskildegaard.dk
karelinjames.com
profiz.com
rokthetalk.com
zealcon.ae
the3-week-diet.net
agenceassemble.fr
muller.nl
drvoip.com
narca.net
mediogiro.com.ar
dentourage.com
boyfriendsgoal.site
bodymindchallenger.com
parentsandkids.com
premiumweb.com.ua:443
alpesiberie.com
nykfdyrehospital.dk
kellengatton.com
ijsselbeton.nl
asiaartgallery.jp
bruut.online
keyboardjournal.com
omegamarbella.com
lsngroupe.com
kemtron.fr
corporacionrr.com
devus.de
yuanshenghotel.com
professionetata.com
oexebusiness.com
sochi-okna23.ru
sellthewrightway.com
ikzoekgod.be
triavlete.com
blucamp.com
transifer.fr
cyberpromote.de
lunoluno.com
druktemakersheerenveen.nl
citiscapes-art.com
supercarhire.co.uk
aciscomputers.com
sshomme.com
fi-institutionalfunds.com
scentedlair.com
zwemofficial.nl
witraz.pl
o2o-academy.com
xrresources.com
veggienessa.com
easydental.ae
haard-totaal.nl
lgiwines.com
shrinkingplanet.com
kausette.com
min-virksomhed.dk
sweetz.fr
speakaudible.com
jalkapuu.net
basindentistry.com
animation-pro.co.uk
sachainchiuk.com
adterium.com
parksideseniorliving.net
avis.mantova.it
antesacademy.it
tchernia-conseil.fr
randyabrown.com
apogeeconseils.fr
skoczynski.eu
janellrardon.com
benchbiz.com
amelielecompte.wordpress.com
animalfood-online.de
akwaba-safaris.com
rhino-storage.co.uk
thestudio.academy
sarahspics.co.uk
skyscanner.ro
envomask.com
sjtpo.org
reygroup.pt
dennisverschuur.com
wyreforest.net
landgoedspica.nl
alharsunindo.com
bcabattoirs.org
hm-com.com
suonenjoen.fi
laylavalentine.com
welovecustomers.fr
k-zubki.ru
trivselsguide.dk
moira-cristescu.com
jameswilliamspainting.com
stralsund-ansichten.de
zumrutkuyutemel.com
acumenconsultingcompany.com
mjk.digital
pilotgreen.com
gosouldeep.com
wribrazil.com
mediahub.co.nz
lesyeuxbleus.net
artcase.pl
baita.ac
qwikcoach.com
chatberlin.de
michal-s.co.il
teamsegeln.ch
jag.me
saint-malo-developpement.fr
luvinsburger.fr
galatee-couture.com
cp-bap.de
liverpoolabudhabi.ae
billyoart.com
monstarrsoccer.com
buffdaddyblog.com
internalresults.com
pazarspor.org.tr
chainofhopeeurope.eu
triplettabordeaux.fr
mayprogulka.ru
renderbox.ch
kombi-dress.com
precisetemp.com
xn--80abehgab4ak0ddz.xn--p1ai
bonitabeachassociation.com
domaine-des-pothiers.com
sunsolutions.es
tellthebell.website
unexplored.gr
leloupblanc.gr
g2mediainc.com
magrinya.net
floweringsun.org
tastevirginia.com
midwestschool.org
worldproskitour.com
baumfinancialservices.com
fixx-repair.com
bratek-immobilien.de
explora.nl
morgansconsult.com
allinonecampaign.com
afbudsrejserallinclusive.dk
rishigangoly.com
heimdalbygg.no
ufovidmag.com
rossomattonecase.it
sycamoregreenapts.com
mustangmarketinggroup.com
ninjaki.com
angeleyezstripclub.com
futurenetworking.com
mariamalmahdi.com
cardsandloyalty.com
speiserei-hannover.de
biblica.com
pansionatblago.ru
jeanmonti.com
livelai.com
jlwilsonbooks.com
relevantonline.eu
a-zpaperwork.eu
metcalfe.ca
framemyballs.com
smartercashsystem.com
hospitalitytrainingsolutions.co.uk
silverbird.dk
burg-zelem.de
expohomes.com
bulyginnikitav.000webhostapp.com
salonlamar.nl
kristianboennelykke.dk
comoserescritor.com
topautoinsurers.net
krishnabrawijaya.com
ultimatelifesource.com
mariannelemenestrel.com
qrs-international.com
belofloripa.be
leijstrom.com
tieronechic.com
biodentify.ai
khtrx.com
clemenfoto.dk
skooppi.fi
dreamvoiceclub.org
ntinasfiloxenia.gr
gurutechnologies.net
cesep2019.com
cascinarosa33.it
jax-interim-and-projectmanagement.com
stage-infirmier.fr
rattanwarehouse.co.uk
flossmoordental.com
5pointpt.com
tatyanakopieva.ru
the-beauty-guides.com
birthplacemag.com
louiedager.com
lapponiasafaris.com
greenrider.nl
line-x.co.uk
fotoslubna.com
advanced-removals.co.uk
slideevents.be
mike.matthies.de
tbalp.co.uk
molinum.pt
ox-home.com
frameshift.it
mieleshopping.it
kroophold-sjaelland.dk
liepertgrafikweb.at
auto-opel.ro
hartofurniture.com
promus.ca
baikalflot.ru
cac2040.com
levencovka.ru
mac-computer-support-hamburg.de
arazi.eus
nalliasmali.net
invela.dk
brisbaneosteopathic.com.au
tecleados.com
studionumerik.fr
alcye.com
p-ride.live
naukaip.ru
fluzfluzrewards.com
glende-pflanzenparadies.de
tweedekansenloket.nl
banukumbak.com
datatri.be
oththukaruva.com
globalcompliancenews.com
webforsites.com
chomiksy.net
altocontatto.net
paardcentraal.nl
theintellect.edu.pk
blueridgeheritage.com
zuerich-umzug.ch
ivancacu.com
alabamaroofingllc.com
skidpiping.de
bluemarinefoundation.com
cincinnatiphotocompany.org
banksrl.co.za
jglconsultancy.com
rvside.com
diverfiestas.com.es
rentsportsequip.com
catchup-mag.com
taulunkartano.fi
from02pro.com
babysitting-hk.helpergo.co
mrcar.nl
fysiotherapierijnmond.nl
qandmmusiccenter.com
factoriareloj.com
prodentalblue.com
rapid5kloan.org
azloans.com
carsten.sparen-it.de
universelle.fr
piestar.com
ilveshistoria.com
noda.com.ua
kafkacare.com
delegationhub.com
kryddersnapsen.dk
nepal-pictures.com
nginx.com
satoblog.org
mindfuelers.com
nationnewsroom.com
beauty-traveller.com
parisschool.ru
jlgraphisme.fr
boomerslivinglively.com
apiarista.de
rechtenplicht.be
dogsunlimitedguide.com
eventosvirtualesexitosos.com
cssp-mediation.org
chinowarehousespace.com
lumturo.academy
altitudeboise.com
bescomedical.de
redctei.co
bavovrienden.nl
jayfurnitureco.com
optigas.com
magnetvisual.com
martha-frets-ceramics.nl
pureelements.nl
purepreprod4.com
richardkershawwines.co.za
smarttourism.academy
stagefxinc.com
loparnille.se
poems-for-the-soul.ch
m2graph.fr
irizar.com
parseport.com
indiebizadvocates.org
bg.szczecin.pl
guohedd.com
dnqa.co.uk
concontactodirecto.com
drnelsonpediatrics.com
mesajjongeren.nl
elex.is
daveystownhouse.com
livedeveloper.com
michaelfiegel.com
weddingceremonieswithtim.com
airvapourbarrier.com
fridakids.com
boloria.de
sber-biznes.com
utilisacteur.fr
pourlabretagne.bzh
perceptdecor.com
gavelmasters.com
fitnessblenderstory.com
pubcon.com
craftingalegacy.com
goodherbalhealth.com
fsbforsale.com
letterscan.de
testitjavertailut.net
shortysspices.com
humanviruses.org
avtoboss163.ru:443
physio-lang.de
the-cupboard.co.uk
stabilisateur.fr
computer-place.de
egpu.fr
wademurray.com
test-teleachat.fr
johnkoen.com
ronaldhendriks.nl
matteoruzzaofficial.com
cops4causes.org
fla.se
scholarquotes.com
fidelitytitleoregon.com
happycatering.de
jacquesgarcianoto.com
hensleymarketing.com
casinodepositors.com
publicompserver.de
peppergreenfarmcatering.com.au
etgdogz.de
funworx.de
queertube.net
wordpress.idium.no
licensed-public-adjuster.com
hoteltantra.com
-
net
true
-
pid
28
-
prc
sqlbrowser.exe
ocssd.exe
infopath.exe
dbsnmp.exe
mysqld_nt.exe
firefoxconfig.exe
sqbcoreservice.exe
thebat.exe
thebat64.exe
mysqld.exe
xfssvccon.exe
steam.exe
ocautoupds.exe
mspub.exe
msaccess.exe
mydesktopqos.exe
thunderbird.exe
synctime.exe
tbirdconfig.exe
oracle.exe
msftesql.exe
wordpad.exe
winword.exe
sqlwriter.exe
sqlservr.exe
isqlplussvc.exe
dbeng50.exe
encsvc.exe
powerpnt.exe
mydesktopservice.exe
outlook.exe
visio.exe
ocomm.exe
sqlagent.exe
agntsvc.exe
onenote.exe
mysqld_opt.exe
excel.exe
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on you computer has expansion {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
162
Signatures
-
Sodinokibi family
-
Sodinokibi/Revil sample 1 IoCs
Processes:
resource yara_rule sample family_sodinokobi
Files
-
ff61085ff157ef0a98ab65a5343e65637ee24e12cac3b418e45532fc2747f3e5.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zeacl Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ