Static task
static1
Behavioral task
behavioral1
Sample
d48edfe661d15d1146923844c2bc79f5992a2c38d4bb60c6d9f67094492194ff.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
d48edfe661d15d1146923844c2bc79f5992a2c38d4bb60c6d9f67094492194ff.dll
Resource
win10-en-20211208
General
-
Target
d48edfe661d15d1146923844c2bc79f5992a2c38d4bb60c6d9f67094492194ff
-
Size
166KB
-
MD5
46a10b1e1fe68e124c86ee237751fd44
-
SHA1
78f29761f7f0f57a8f92e5f23d9e4d2d6465e848
-
SHA256
d48edfe661d15d1146923844c2bc79f5992a2c38d4bb60c6d9f67094492194ff
-
SHA512
c0fbd92fcb136fd5376efba041d4170eccd8bae219812ef00dfc7edfe26f06b651153bdfa2b01d648ebbbc6901c3205790c26a037f85625c0722173d843e633a
-
SSDEEP
3072:MJMawtnGqtWoKeZ9fh1CgnNto6jfHVl/9vq07:Ww9vteqJggn7oUfHDVvq
Malware Config
Extracted
sodinokibi
$2a$10$JGvSHcF10dzkomCzDQ2loOwr8XX8tFG2RJ6lpK8RXPz8C2krOcsJC
3795
socstrp.org
homng.net
slupetzky.at
creative-waves.co.uk
bestbet.com
leoben.at
shadebarandgrillorlando.com
hatech.io
harveybp.com
smartypractice.com
sojamindbody.com
catholicmusicfest.com
4net.guru
teresianmedia.org
zso-mannheim.de
fax-payday-loans.com
iyahayki.nl
besttechie.com
resortmtn.com
firstpaymentservices.com
wmiadmin.com
eaglemeetstiger.de
koken-voor-baby.nl
xn--fn-kka.no
commonground-stories.com
andersongilmour.co.uk
advizewealth.com
henricekupper.com
westdeptfordbuyrite.com
levdittliv.se
rushhourappliances.com
aunexis.ch
tux-espacios.com
plantag.de
international-sound-awards.com
pmc-services.de
ecopro-kanto.com
danubecloud.com
new.devon.gov.uk
iqbalscientific.com
goodgirlrecovery.com
jorgobe.at
homesdollar.com
sobreholanda.com
torgbodenbollnas.se
bigbaguettes.eu
luckypatcher-apkz.com
sevenadvertising.com
boisehosting.net
makeflowers.ru
bockamp.com
entopic.com
christ-michael.net
connectedace.com
truenyc.co
offroadbeasts.com
refluxreducer.com
nacktfalter.de
mirjamholleman.nl
biapi-coaching.fr
web.ion.ag
artallnightdc.com
backstreetpub.com
schoolofpassivewealth.com
alfa-stroy72.com
dramagickcom.wordpress.com
quickyfunds.com
vyhino-zhulebino-24.ru
bouquet-de-roses.com
rhinosfootballacademy.com
bristolaeroclub.co.uk
chefdays.de
microcirc.net
girlillamarketing.com
gonzalezfornes.es
gymnasedumanagement.com
roadwarrior.app
sofavietxinh.com
jsfg.com
jobmap.at
baronloan.org
antonmack.de
simulatebrain.com
xlarge.at
allentownpapershow.com
katketytaanet.fi
mbfagency.com
lukeshepley.wordpress.com
wolf-glas-und-kunst.de
urmasiimariiuniri.ro
webcodingstudio.com
tinyagency.com
rksbusiness.com
todocaracoles.com
bxdf.info
krlosdavid.com
thailandholic.com
mapawood.com
zonamovie21.net
sinal.org
lecantou-coworking.com
alhashem.net
norpol-yachting.com
c-a.co.in
corona-handles.com
architekturbuero-wagner.net
promalaga.es
charlottepoudroux-photographie.fr
bordercollie-nim.nl
cheminpsy.fr
hihaho.com
hebkft.hu
12starhd.online
sotsioloogia.ee
vermoote.de
lightair.com
funjose.org.gt
ledmes.ru
simoneblum.de
babcockchurch.org
campusoutreach.org
greenfieldoptimaldentalcare.com
no-plans.com
notsilentmd.org
joseconstela.com
klusbeter.nl
julis-lsa.de
tomaso.gr
naswrrg.org
nestor-swiss.ch
controldekk.com
dpo-as-a-service.com
nicoleaeschbachorg.wordpress.com
aco-media.nl
parebrise-tla.fr
littlebird.salon
imaginado.de
smale-opticiens.nl
mountaintoptinyhomes.com
celularity.com
otto-bollmann.de
boosthybrid.com.au
simpkinsedwards.co.uk
live-con-arte.de
lbcframingelectrical.com
igrealestate.com
trapiantofue.it
csgospeltips.se
juneauopioidworkgroup.org
work2live.de
travelffeine.com
bafuncs.org
slimani.net
galleryartfair.com
classycurtainsltd.co.uk
birnam-wood.com
sairaku.net
courteney-cox.net
cimanchesterescorts.co.uk
newyou.at
alten-mebel63.ru
lenreactiv-shop.ru
bee4win.com
layrshift.eu
tsklogistik.eu
geisterradler.de
sw1m.ru
jerling.de
edgewoodestates.org
kikedeoliveira.com
architecturalfiberglass.org
evangelische-pfarrgemeinde-tuniberg.de
tecnojobsnet.com
woodworkersolution.com
tradiematepro.com.au
selfoutlet.com
ziegler-praezisionsteile.de
yamalevents.com
lichencafe.com
mirkoreisser.de
triggi.de
oneplusresource.org
klimt2012.info
sabel-bf.com
tenacitytenfold.com
baustb.de
midmohandyman.com
synlab.lt
bastutunnan.se
irishmachineryauctions.com
mank.de
tandartspraktijkhartjegroningen.nl
pawsuppetlovers.com
liveottelut.com
ki-lowroermond.nl
mrxermon.de
polzine.net
socialonemedia.com
artotelamsterdam.com
takeflat.com
thefixhut.com
bouncingbonanza.com
yourobgyn.net
rollingrockcolumbia.com
dontpassthepepper.com
zewatchers.com
mytechnoway.com
pmcimpact.com
echtveilig.nl
jvanvlietdichter.nl
c2e-poitiers.com
farhaani.com
blewback.com
tetinfo.in
facettenreich27.de
xn--thucmctc-13a1357egba.com
symphonyenvironmental.com
faronics.com
ncuccr.org
teczowadolina.bytom.pl
heliomotion.com
allamatberedare.se
ymca-cw.org.uk
pasivect.co.uk
ligiercenter-sachsen.de
seproc.hn
mylovelybluesky.com
asiluxury.com
beaconhealthsystem.org
whyinterestingly.ru
kingfamily.construction
modelmaking.nl
handi-jack-llc.com
greenko.pl
35-40konkatsu.net
pasvenska.se
songunceliptv.com
onlybacklink.com
modamilyon.com
nvwoodwerks.com
pickanose.com
saka.gr
denifl-consulting.at
noskierrenteria.com
antenanavi.com
lefumetdesdombes.com
peterstrobos.com
walter-lemm.de
ventti.com.ar
nuzech.com
montrium.com
havecamerawilltravel2017.wordpress.com
craigmccabe.fun
profectis.de
ctrler.cn
readberserk.com
forskolorna.org
quizzingbee.com
behavioralmedicinespecialists.com
seitzdruck.com
shonacox.com
cite4me.org
vesinhnha.com.vn
precisionbevel.com
bridgeloanslenders.com
associationanalytics.com
forestlakeuca.org.au
thaysa.com
slashdb.com
vancouver-print.ca
sachnendoc.com
leather-factory.co.jp
alsace-first.com
stormwall.se
beautychance.se
qualitus.com
notmissingout.com
flexicloud.hk
partnertaxi.sk
mbxvii.com
neuschelectrical.co.za
kisplanning.com.au
garage-lecompte-rouen.fr
2ekeus.nl
accountancywijchen.nl
parking.netgateway.eu
devstyle.org
biortaggivaldelsa.com
fairfriends18.de
chaotrang.com
christinarebuffetcourses.com
myhostcloud.com
importardechina.info
luxurytv.jp
satyayoga.de
embracinghiscall.com
atozdistribution.co.uk
dinslips.se
kath-kirche-gera.de
eraorastudio.com
you-bysia.com.au
surespark.org.uk
cnoia.org
desert-trails.com
petnest.ir
baumkuchenexpo.jp
caribbeansunpoker.com
smalltownideamill.wordpress.com
airconditioning-waalwijk.nl
croftprecision.co.uk
charlesreger.com
zenderthelender.com
drfoyle.com
coursio.com
datacenters-in-europe.com
finde-deine-marke.de
solinegraphic.com
kosterra.com
dutchcoder.nl
schraven.de
dezatec.es
camsadviser.com
seagatesthreecharters.com
ateliergamila.com
greenpark.ch
fitnessingbyjessica.com
drnice.de
judithjansen.com
div-vertriebsforschung.de
centrospgolega.com
pridoxmaterieel.nl
loprus.pl
starsarecircular.org
filmstreamingvfcomplet.be
8449nohate.org
lange.host
rafaut.com
dr-seleznev.com
securityfmm.com
autodujos.lt
dublikator.com
antiaginghealthbenefits.com
seminoc.com
geekwork.pl
oceanastudios.com
centromarysalud.com
extraordinaryoutdoors.com
hushavefritid.dk
bunburyfreightservices.com.au
jasonbaileystudio.com
fatfreezingmachines.com
analiticapublica.es
yassir.pro
deko4you.at
patrickfoundation.net
gratispresent.se
wellplast.se
baylegacy.com
enovos.de
wsoil.com.sg
manutouchmassage.com
vdberg-autoimport.nl
spectrmash.ru
mousepad-direkt.de
augenta.com
malychanieruchomoscipremium.com
hashkasolutindo.com
haar-spange.com
aarvorg.com
praxis-management-plus.de
jolly-events.com
tuuliautio.fi
lapmangfpt.info.vn
brawnmediany.com
pierrehale.com
theshungiteexperience.com.au
lionware.de
ostheimer.at
operaslovakia.sk
deepsouthclothingcompany.com
gasolspecialisten.se
raschlosser.de
portoesdofarrobo.com
victoriousfestival.co.uk
allfortheloveofyou.com
aakritpatel.com
castillobalduz.es
visiativ-industry.fr
apprendrelaudit.com
admos-gleitlager.de
pivoineetc.fr
waveneyrivercentre.co.uk
dr-tremel-rednitzhembach.de
slwgs.org
crediacces.com
vihannesporssi.fi
alysonhoward.com
gantungankunciakrilikbandung.com
servicegsm.net
piajeppesen.dk
sweering.fr
verifort-capital.de
abogadoengijon.es
vibehouse.rw
samnewbyjax.com
mikeramirezcpa.com
autofolierung-lu.de
bingonearme.org
ravensnesthomegoods.com
instatron.net
mediaclan.info
anteniti.com
bodyfulls.com
anthonystreetrimming.com
opatrovanie-ako.sk
steampluscarpetandfloors.com
spylista.com
bbsmobler.se
marcuswhitten.site
xltyu.com
calxplus.eu
rozemondcoaching.nl
naturstein-hotte.de
123vrachi.ru
testzandbakmetmening.online
tonelektro.nl
faizanullah.com
aselbermachen.com
101gowrie.com
d2marketing.co.uk
associacioesportivapolitg.cat
jadwalbolanet.info
trystana.com
urclan.net
vannesteconstruct.be
xn--logopdie-leverkusen-kwb.de
marietteaernoudts.nl
crosspointefellowship.church
lmtprovisions.com
lubetkinmediacompanies.com
hypozentrum.com
bloggyboulga.net
prochain-voyage.net
diversiapsicologia.es
dr-pipi.de
smessier.com
polymedia.dk
degroenetunnel.com
bigler-hrconsulting.ch
theclubms.com
vickiegrayimages.com
schmalhorst.de
fransespiegels.nl
clos-galant.com
assurancesalextrespaille.fr
ogdenvision.com
wien-mitte.co.at
seevilla-dr-sturm.at
southeasternacademyofprosthodontics.org
richard-felix.co.uk
navyfederalautooverseas.com
werkkring.nl
www1.proresult.no
joyeriaorindia.com
plotlinecreative.com
oslomf.no
boulderwelt-muenchen-west.de
sportiomsportfondsen.nl
outcomeisincome.com
kindersitze-vergleich.de
hrabritelefon.hr
hotelzentral.at
smokeysstoves.com
kampotpepper.gives
tomoiyuma.com
purposeadvisorsolutions.com
ftlc.es
mooshine.com
deprobatehelp.com
urist-bogatyr.ru
kojima-shihou.com
hotelsolbh.com.br
morawe-krueger.de
thedresserie.com
talentwunder.com
completeweddingkansas.com
nataschawessels.com
rebeccarisher.com
sauschneider.info
liikelataamo.fi
saarland-thermen-resort.com
easytrans.com.au
serce.info.pl
blog.solutionsarchitect.guru
iwr.nl
agence-referencement-naturel-geneve.net
stoeferlehalle.de
higadograsoweb.com
strategicstatements.com
expandet.dk
i-arslan.de
aniblinova.wordpress.com
calabasasdigest.com
stefanpasch.me
ivivo.es
kissit.ca
maryloutaylor.com
fitovitaforum.com
johnsonfamilyfarmblog.wordpress.com
jeanlouissibomana.com
winrace.no
hoteledenpadova.it
xoabigail.com
twohourswithlena.wordpress.com
micahkoleoso.de
aglend.com.au
kadesignandbuild.co.uk
mepavex.nl
houseofplus.com
lachofikschiet.nl
dsl-ip.de
consultaractadenacimiento.com
bigasgrup.com
merzi.info
withahmed.com
gamesboard.info
suncrestcabinets.ca
advokathuset.dk
senson.fi
id-vet.com
revezlimage.com
slimidealherbal.com
koko-nora.dk
marathonerpaolo.com
danskretursystem.dk
perbudget.com
zervicethai.co.th
manifestinglab.com
sterlingessay.com
siluet-decor.ru
maxadams.london
stallbyggen.se
figura.team
crowd-patch.co.uk
fizzl.ru
tophumanservicescourses.com
nancy-informatique.fr
pv-design.de
cityorchardhtx.com
psnacademy.in
unim.su
thomasvicino.com
adultgamezone.com
cwsitservices.co.uk
body-guards.it
justinvieira.com
edrcreditservices.nl
despedidascostablanca.es
troegs.com
streamerzradio1.site
herbstfeststaefa.ch
heidelbergartstudio.gallery
penco.ie
schoellhammer.com
femxarxa.cat
campus2day.de
asgestion.com
gaiam.nl
abitur-undwieweiter.de
bimnapratica.com
hugoversichert.de
boldcitydowntown.com
carrybrands.nl
carlosja.com
sportverein-tambach.de
groupe-cets.com
gastsicht.de
em-gmbh.ch
cafemattmeera.com
ivfminiua.com
levihotelspa.fi
elpa.se
balticdentists.com
parkstreetauto.net
kamahouse.net
helenekowalsky.com
dlc.berlin
familypark40.com
365questions.org
apolomarcas.com
siliconbeach-realestate.com
danholzmann.com
adoptioperheet.fi
strandcampingdoonbeg.com
cursosgratuitosnainternet.com
testcoreprohealthuk.com
fiscalsort.com
real-estate-experts.com
gadgetedges.com
paulisdogshop.de
sla-paris.com
faroairporttransfers.net
jakekozmor.com
theapifactory.com
brigitte-erler.com
blumenhof-wegleitner.at
copystar.co.uk
craigvalentineacademy.com
ilive.lt
eglectonk.online
conasmanagement.de
homecomingstudio.com
muamuadolls.com
mezhdu-delom.ru
asteriag.com
crowcanyon.com
brandl-blumen.de
wacochamber.com
exenberger.at
lescomtesdemean.be
krcove-zily.eu
miriamgrimm.de
employeesurveys.com
whittier5k.com
vloeren-nu.nl
atalent.fi
basisschooldezonnewijzer.nl
centuryrs.com
longislandelderlaw.com
milestoneshows.com
pcprofessor.com
pubweb.carnet.hr
stampagrafica.es
caffeinternet.it
planchaavapor.net
dutchbrewingcoffee.com
hardinggroup.com
brevitempore.net
vetapharma.fr
thewellnessmimi.com
mrsfieldskc.com
webmaster-peloton.com
extensionmaison.info
drinkseed.com
vox-surveys.com
conexa4papers.trade
live-your-life.jp
sagadc.com
renergysolution.com
webhostingsrbija.rs
blood-sports.net
leeuwardenstudentcity.nl
olejack.ru
bookspeopleplaces.com
tinkoff-mobayl.ru
trulynolen.co.uk
pier40forall.org
cerebralforce.net
buroludo.nl
bouldercafe-wuppertal.de
licor43.de
icpcnj.org
sexandfessenjoon.wordpress.com
blgr.be
igorbarbosa.com
toponlinecasinosuk.co.uk
nurturingwisdom.com
insp.bi
syndikat-asphaltfieber.de
irinaverwer.com
cleliaekiko.online
atmos-show.com
xn--fnsterputssollentuna-39b.se
deschl.net
retroearthstudio.com
izzi360.com
stopilhan.com
mylolis.com
marchand-sloboda.com
broseller.com
odiclinic.org
hannah-fink.de
skiltogprint.no
abl1.net
michaelsmeriglioracing.com
pocket-opera.de
amylendscrestview.com
frontierweldingllc.com
milltimber.aberdeen.sch.uk
huesges-gruppe.de
glennroberts.co.nz
mardenherefordshire-pc.gov.uk
1kbk.com.ua
simpliza.com
kalkulator-oszczednosci.pl
i-trust.dk
chandlerpd.com
aurum-juweliere.de
kaliber.co.jp
phantastyk.com
lebellevue.fr
romeguidedvisit.com
esope-formation.fr
jbbjw.com
innote.fi
berlin-bamboo-bikes.org
gemeentehetkompas.nl
lascuola.nl
highlinesouthasc.com
americafirstcommittee.org
evergreen-fishing.com
agence-chocolat-noir.com
modestmanagement.com
drugdevice.org
ikads.org
thomas-hospital.de
ulyssemarketing.com
sloverse.com
roygolden.com
pomodori-pizzeria.de
transportesycementoshidalgo.es
manijaipur.com
kao.at
psa-sec.de
liliesandbeauties.org
blacksirius.de
systemate.dk
blossombeyond50.com
softsproductkey.com
verbisonline.com
chatizel-paysage.fr
global-kids.info
pelorus.group
stoneys.ch
sandd.nl
maureenbreezedancetheater.org
psc.de
ohidesign.com
zzyjtsgls.com
xn--vrftet-pua.biz
upplandsspar.se
mdacares.com
tanzschule-kieber.de
oncarrot.com
myzk.site
hokagestore.com
logopaedie-blomberg.de
dekkinngay.com
xn--singlebrsen-vergleich-nec.com
otsu-bon.com
all-turtles.com
ilcdover.com
art2gointerieurprojecten.nl
philippedebroca.com
jacquin-maquettes.com
nativeformulas.com
marketingsulweb.com
austinlchurch.com
naturalrapids.com
launchhubl.com
hvccfloorcare.com
candyhouseusa.com
mariposapropaneaz.com
ontrailsandboulevards.com
ora-it.de
uimaan.fi
knowledgemuseumbd.com
mrsplans.net
mooreslawngarden.com
jusibe.com
hellohope.com
aminaboutique247.com
ausair.com.au
lusak.at
botanicinnovations.com
hexcreatives.co
shiresresidential.com
pt-arnold.de
dubnew.com
tarotdeseidel.com
stacyloeb.com
villa-marrakesch.de
durganews.com
cuppacap.com
spinheal.ru
finediningweek.pl
podsosnami.ru
saxtec.com
fayrecreations.com
people-biz.com
comparatif-lave-linge.fr
xn--rumung-bua.online
humancondition.com
spacecitysisters.org
darnallwellbeing.org.uk
fotoideaymedia.es
abogadosadomicilio.es
coffreo.biz
rerekatu.com
fensterbau-ziegler.de
ncid.bc.ca
ilso.net
themadbotter.com
miraclediet.fun
abogados-en-alicante.es
pogypneu.sk
educar.org
nijaplay.com
bildungsunderlebnis.haus
nokesvilledentistry.com
waynela.com
bsaship.com
sportsmassoren.com
cursoporcelanatoliquido.online
xtptrack.com
friendsandbrgrs.com
tanzprojekt.com
myteamgenius.com
stingraybeach.com
vitalyscenter.es
bowengroup.com.au
mediaacademy-iraq.org
stemplusacademy.com
pinkexcel.com
nandistribution.nl
galserwis.pl
milsing.hr
berliner-versicherungsvergleich.de
hkr-reise.de
videomarketing.pro
buymedical.biz
polychromelabs.com
monark.com
d1franchise.com
bhwlawfirm.com
thee.network
milanonotai.it
caribdoctor.org
jenniferandersonwriter.com
haremnick.com
jandaonline.com
stupbratt.no
idemblogs.com
ungsvenskarna.se
daniel-akermann-architektur-und-planung.ch
coastalbridgeadvisors.com
dw-css.de
maineemploymentlawyerblog.com
oneheartwarriors.at
panelsandwichmadrid.es
lapinlviasennus.fi
solerluethi-allart.ch
corendonhotels.com
baptisttabernacle.com
lapinvihreat.fi
quemargrasa.net
tandartspraktijkheesch.nl
minipara.com
bodyforwife.com
craftleathermnl.com
highimpactoutdoors.net
proudground.org
summitmarketingstrategies.com
nosuchthingasgovernment.com
devok.info
imadarchid.com
puertamatic.es
citymax-cr.com
kenhnoithatgo.com
nakupunafoundation.org
rota-installations.co.uk
ino-professional.ru
fotoscondron.com
madinblack.com
n1-headache.com
parkcf.nl
grupocarvalhoerodrigues.com.br
gw2guilds.org
schutting-info.nl
rosavalamedahr.com
freie-baugutachterpraxis.de
porno-gringo.com
huissier-creteil.com
scenepublique.net
ai-spt.jp
kamienny-dywan24.pl
team-montage.dk
smhydro.com.pl
plastidip.com.ar
aodaichandung.com
coding-machine.com
mountsoul.de
solhaug.tk
tigsltd.com
radaradvies.nl
corelifenutrition.com
physiofischer.de
ra-staudte.de
pointos.com
argenblogs.com.ar
restaurantesszimmer.de
platformier.com
coding-marking.com
ralister.co.uk
theletter.company
arteservicefabbro.com
ditog.fr
onlyresultsmarketing.com
binder-buerotechnik.at
artige.com
turkcaparbariatrics.com
musictreehouse.net
nhadatcanho247.com
wurmpower.at
nmiec.com
delawarecorporatelaw.com
devlaur.com
aprepol.com
lynsayshepherd.co.uk
gmto.fr
commercialboatbuilding.com
lykkeliv.net
nachhilfe-unterricht.com
transliminaltribe.wordpress.com
waywithwords.net
epwritescom.wordpress.com
daklesa.de
presseclub-magdeburg.de
trackyourconstruction.com
rieed.de
creamery201.com
darrenkeslerministries.com
triactis.com
DupontSellsHomes.com
spd-ehningen.de
allure-cosmetics.at
healthyyworkout.com
jyzdesign.com
thedad.com
newstap.com.ng
ftf.or.at
rehabilitationcentersinhouston.net
poultrypartners.nl
katiekerr.co.uk
fannmedias.com
abogadosaccidentetraficosevilla.es
eadsmurraypugh.com
bauertree.com
tastewilliamsburg.com
cuspdental.com
lorenacarnero.com
eco-southafrica.com
ausbeverage.com.au
smogathon.com
intecwi.com
cirugiauretra.es
bierensgebakkramen.nl
ecpmedia.vn
dubscollective.com
blogdecachorros.com
humanityplus.org
stemenstilte.nl
destinationclients.fr
executiveairllc.com
answerstest.ru
maratonaclubedeportugal.com
digi-talents.com
qualitaetstag.de
mediaplayertest.net
cactusthebrand.com
toreria.es
spsshomeworkhelp.com
digivod.de
bogdanpeptine.ro
dushka.ua
dirittosanitario.biz
maasreusel.nl
bundabergeyeclinic.com.au
meusharklinithome.wordpress.com
hairnetty.wordpress.com
uranus.nl
hmsdanmark.dk
verytycs.com
heurigen-bauer.at
officehymy.com
ouryoungminds.wordpress.com
ruralarcoiris.com
tennisclubetten.nl
beyondmarcomdotcom.wordpress.com
zflas.com
wasmachtmeinfonds.at
bricotienda.com
abuelos.com
herbayupro.com
cyntox.com
grelot-home.com
qlog.de
limassoldriving.com
effortlesspromo.com
mymoneyforex.com
supportsumba.nl
mooglee.com
narcert.com
ianaswanson.com
elimchan.com
plv.media
boompinoy.com
skanah.com
micro-automation.de
denovofoodsgroup.com
fibrofolliculoma.info
geoffreymeuli.com
erstatningsadvokaterne.dk
zimmerei-fl.de
htchorst.nl
argos.wityu.fund
theadventureedge.com
dareckleyministries.com
carriagehousesalonvt.com
wari.com.pe
corola.es
filmvideoweb.com
lucidinvestbank.com
hhcourier.com
moveonnews.com
cranleighscoutgroup.org
balticdermatology.lt
makeurvoiceheard.com
jobcenterkenya.com
bargningharnosand.se
tanciu.com
carolinepenn.com
iphoneszervizbudapest.hu
appsformacpc.com
directwindowco.com
groupe-frayssinet.fr
falcou.fr
naturavetal.hr
punchbaby.com
mir-na-iznanku.com
kaotikkustomz.com
almosthomedogrescue.dog
celeclub.org
imperfectstore.com
parks-nuernberg.de
hairstylesnow.site
iwelt.de
euro-trend.pl
edv-live.de
vanswigchemdesign.com
jameskibbie.com
y-archive.com
tampaallen.com
gasbarre.com
personalenhancementcenter.com
globedivers.wordpress.com
vitavia.lt
run4study.com
smithmediastrategies.com
shiftinspiration.com
first-2-aid-u.com
comarenterprises.com
waermetauscher-berechnen.de
321play.com.hk
vibethink.net
gopackapp.com
macabaneaupaysflechois.com
harpershologram.wordpress.com
praxis-foerderdiagnostik.de
latribuessentielle.com
pixelarttees.com
sporthamper.com
igfap.com
braffinjurylawfirm.com
evologic-technologies.com
journeybacktolife.com
sanyue119.com
foretprivee.ca
myhealth.net.au
sipstroysochi.ru
chavesdoareeiro.com
paymybill.guru
alvinschwartz.wordpress.com
theduke.de
shhealthlaw.com
zimmerei-deboer.de
vorotauu.ru
unetica.fr
promesapuertorico.com
chrissieperry.com
body-armour.online
kariokids.com
paradicepacks.com
foryourhealth.live
ahouseforlease.com
happyeasterimages.org
bptdmaluku.com
deltacleta.cat
wychowanieprzedszkolne.pl
anybookreader.de
makeitcount.at
veybachcenter.de
karacaoglu.nl
ladelirante.fr
huehnerauge-entfernen.de
delchacay.com.ar
simplyblessedbykeepingitreal.com
kuntokeskusrok.fi
amerikansktgodis.se
osterberg.fi
colorofhorses.com
noixdecocom.fr
helikoptervluchtnewyork.nl
hiddencitysecrets.com.au
oemands.dk
tstaffing.nl
kostenlose-webcams.com
1team.es
ceid.info.tr
rumahminangberdaya.com
fitnessbazaar.com
better.town
financescorecard.com
mmgdouai.fr
jiloc.com
markelbroch.com
mdk-mediadesign.de
kafu.ch
noesis.tech
collaborativeclassroom.org
burkert-ideenreich.de
mindpackstudios.com
kmbshipping.co.uk
tips.technology
love30-chanko.com
lloydconstruction.com
ncs-graphic-studio.com
mastertechengineering.com
upmrkt.co
iviaggisonciliegie.it
smart-light.co.uk
autopfand24.de
schlafsack-test.net
acomprarseguidores.com
ceres.org.au
iyengaryogacharlotte.com
rostoncastings.co.uk
lillegrandpalais.com
edelman.jp
cortec-neuro.com
ihr-news.jp
x-ray.ca
insigniapmg.com
pcp-nc.com
the-virtualizer.com
rimborsobancario.net
danielblum.info
ccpbroadband.com
sahalstore.com
kaminscy.com
pay4essays.net
latestmodsapks.com
norovirus-ratgeber.de
tulsawaterheaterinstallation.com
labobit.it
stoeberstuuv.de
bargningavesta.se
space.ua
fundaciongregal.org
kedak.de
4youbeautysalon.com
insidegarage.pl
mercantedifiori.com
the-domain-trader.com
freie-gewerkschaften.de
woodleyacademy.org
shsthepapercut.com
leda-ukraine.com.ua
gporf.fr
kevinjodea.com
autodemontagenijmegen.nl
zweerscreatives.nl
teknoz.net
zieglerbrothers.de
mrtour.site
kirkepartner.dk
reddysbakery.com
oldschoolfun.net
smejump.co.th
memaag.com
thenewrejuveme.com
interactcenter.org
itelagen.com
spargel-kochen.de
ampisolabergeggi.it
dnepr-beskid.com.ua
sanaia.com
rocketccw.com
sarbatkhalsafoundation.org
kojinsaisei.info
nsec.se
tongdaifpthaiphong.net
linnankellari.fi
compliancesolutionsstrategies.com
bayoga.co.uk
remcakram.com
pferdebiester.de
actecfoundation.org
ussmontanacommittee.us
yousay.site
kunze-immobilien.de
projetlyonturin.fr
id-et-d.fr
kidbucketlist.com.au
vietlawconsultancy.com
walkingdeadnj.com
worldhealthbasicinfo.com
wraithco.com
bradynursery.com
ecoledansemulhouse.fr
deoudedorpskernnoordwijk.nl
-
net
true
-
pid
$2a$10$JGvSHcF10dzkomCzDQ2loOwr8XX8tFG2RJ6lpK8RXPz8C2krOcsJC
-
prc
ocssd
steam
dbsnmp
dbeng50
sql
isqlplussvc
infopath
oracle
encsvc
thebat
ocautoupds
tbirdconfig
firefox
wordpad
xfssvccon
msaccess
sqbcoreservice
onenote
winword
thunderbird
powerpnt
outlook
visio
synctime
excel
mydesktopservice
agntsvc
ocomm
mspub
mydesktopqos
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-read-me.txt and follow instuctions
-
ransom_template
---=== Welcome BARNI CARLO SPA. ===--- [+] Whats Happen? [+] Your network has been penetrated. Your files are encrypted with strong military algorithm, and currently unavailable. You can check it: all files on your system has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). Also, all your business info copyed to our servers. Personal data of your clients and business contacts extracted. If you do not take action to contact us, the data will be published fo free access everyone. It can also cause GDPR compilance. “Article 32, (1) – c states that “The controller and the processor shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident.” It can hurt organizations where it matters most – Penalties can be as high as €20M or 4% of annual revenues, not to mention the negative public relations fallout. As soon as we receive the payment, all data will be deleted from our servers. [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.cc/{UID} Contact with us in chat on website. You have 3 days. If you need more time to make a decision and collect money for payment - inform the support chat about this. [+] How will the decryption process proceed after payment? [+] After payment we will send to you our scanner-decoder program and detailed instructions for use. With this program you will be able to decrypt all your encrypted files. Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
3795
-
svc
veeam
sophos
mepocs
sql
svc$
memtas
vss
backup
Signatures
-
Sodinokibi family
Files
-
d48edfe661d15d1146923844c2bc79f5992a2c38d4bb60c6d9f67094492194ff.dll windows x86
3405adb708f38a8c5b5ee1fd45dead95
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
CloseHandle
SetErrorMode
CreateThread
Sections
.text Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dq8b Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ