---=== Sodinokibi Ransomware ===---
All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
I suggest you read about us on the Internet, we are known as "Sodinokibi Ransomware". For example, this article:
https://www.coveware.com/blog/2019/7/15/ransomware-amounts-rise-3x-in-q2-as-ryuk-amp-sodinokibi-spread
Pay attention to that:
"How Much Data Is Decrypted with a Ransomware Decryptor?
In Q2 2019, victims who paid for a decryptor recovered 92% of their encrypted data. This statistic varied dramatically depending on the ransomware type.
For example, Ryuk ransomware has a relatively low data recovery rate, at ~ 87%, while Sodinokibi was close to 100%. "
Now you have a guarantee that your files will be returned 100 %.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available. If you have problem with connect, use strictly TOR version 8.5.5
link for download TOR version 8.5.5 here: https://filehippo.com/download_tor_browser_for_windows/
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
4126
svc
memtas
mepocs
vss
backup
sophos
veeam
sql
svc$
Extracted
Path
C:\6wedt-readme.txt
Family
ryuk
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension 6wedt.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
I suggest you read about us on the Internet, we are known as "Sodinokibi Ransomware". For example, this article:
https://www.coveware.com/blog/2019/7/15/ransomware-amounts-rise-3x-in-q2-as-ryuk-amp-sodinokibi-spread
Pay attention to that:
"How Much Data Is Decrypted with a Ransomware Decryptor?
In Q2 2019, victims who paid for a decryptor recovered 92% of their encrypted data. This statistic varied dramatically depending on the ransomware type.
For example, Ryuk ransomware has a relatively low data recovery rate, at ~ 87%, while Sodinokibi was close to 100%. "
Now you have a guarantee that your files will be returned 100 %.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/60A538E431202EFA
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/60A538E431202EFA
Warning: secondary website can be blocked, thats why first variant much better and more available. If you have problem with connect, use strictly TOR version 8.5.5
link for download TOR version 8.5.5 here: https://filehippo.com/download_tor_browser_for_windows/
When you open our website, put the following data in the input form:
Key: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Extension name:
6wedt
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension jtket573t0.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
I suggest you read about us on the Internet, we are known as "Sodinokibi Ransomware". For example, this article:
https://www.coveware.com/blog/2019/7/15/ransomware-amounts-rise-3x-in-q2-as-ryuk-amp-sodinokibi-spread
Pay attention to that:
"How Much Data Is Decrypted with a Ransomware Decryptor?
In Q2 2019, victims who paid for a decryptor recovered 92% of their encrypted data. This statistic varied dramatically depending on the ransomware type.
For example, Ryuk ransomware has a relatively low data recovery rate, at ~ 87%, while Sodinokibi was close to 100%. "
Now you have a guarantee that your files will be returned 100 %.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/86B7F54A3AD4037E
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/86B7F54A3AD4037E
Warning: secondary website can be blocked, thats why first variant much better and more available. If you have problem with connect, use strictly TOR version 8.5.5
link for download TOR version 8.5.5 here: https://filehippo.com/download_tor_browser_for_windows/
When you open our website, put the following data in the input form:
Key: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Extension name:
jtket573t0
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
