General
-
Target
4808d86fd26fa9e62a959f6cb31ca2334cba8b834b6287fd72bd512eee6e1880
-
Size
164KB
-
Sample
220124-clnm6aabc4
-
MD5
f0284d4e56bde839b8b440a949928c90
-
SHA1
588210f0932ba9edb88f2f0fdd6163f6c671bf35
-
SHA256
4808d86fd26fa9e62a959f6cb31ca2334cba8b834b6287fd72bd512eee6e1880
-
SHA512
0ce3d5c8e2ea534630ed3fb4b05dddc1710c44abc7b522f19ddd418e2c66c78f463429d13fddc6fdd5c050dc315395985a90d79530c008ac5b6207db0cabec2b
Static task
static1
Behavioral task
behavioral1
Sample
4808d86fd26fa9e62a959f6cb31ca2334cba8b834b6287fd72bd512eee6e1880.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
4808d86fd26fa9e62a959f6cb31ca2334cba8b834b6287fd72bd512eee6e1880.exe
Resource
win10-en-20211208
Malware Config
Extracted
sodinokibi
28
1513
mazzaropi.com.br
imaginekithomes.co.nz
business-basic.de
jalkapuu.net
egpu.fr
indiebizadvocates.org
onesynergyinternational.com
thenalpa.com
daveystownhouse.com
brunoimmobilier.com
askstaffing.com
paradigmlandscape.com
k-zubki.ru
satoblog.org
encounter-p.net
lagschools.ng
masecologicos.com
letsstopsmoking.co.uk
mangimirossana.it
hekecrm.com
fitnessblenderstory.com
brighthillgroup.com
pankiss.ru
hostastay.com
keyboardjournal.com
rhino-turf.com
nuohous.com
mollymccarthydesign.com
biketruck.de
wademurray.com
dogsunlimitedguide.com
90nguyentuan.com
stralsund-ansichten.de
memphishealthandwellness.com
innovationgames-brabant.nl
apiarista.de
mjk.digital
justaroundthecornerpetsit.com
blueridgeheritage.com
pxsrl.it
production-stills.co.uk
ruggestar.ch
transifer.fr
protoplay.ca
smartmind.net
furland.ru
hartofurniture.com
tchernia-conseil.fr
kroophold-sjaelland.dk
aoyama.ac
pilotgreen.com
astrographic.com
bcmets.info
internestdigital.com
switch-made.com
morgansconsult.com
yayasanprimaunggul.org
ebible.co
forskolinslimeffect.net
drbrianhweeks.com
shortsalemap.com
oportowebdesign.com
modamarfil.com
subyard.com
itheroes.dk
gta-jjb.fr
annenymus.com
voetbalhoogeveen.nl
9nar.com
nourella.com
stage-infirmier.fr
thisprettyhair.com
welovecustomers.fr
agendatwentytwenty.com
avtoboss163.ru:443
relevantonline.eu
hoteltantra.com
perceptdecor.com
arazi.eus
elex.is
arearugcleaningnyc.com
parisschool.ru
advancedeyecare.com
witraz.pl
breakluckrecords.com
lgiwines.com
aheadloftladders.co.uk
racefietsenblog.nl
mamajenedesigns.com
buffdaddyblog.com
mindfuelers.com
cmascd.com
jax-interim-and-projectmanagement.com
bescomedical.de
banukumbak.com
drbenveniste.com
patriotcleaning.net
tatyanakopieva.ru
scietech.academy
pro-gamer.pl
vitormmcosta.com
leopoldineroux.com
betterce.com
stitch-n-bitch.com
elitkeramika-shop.com.ua
marmarabasin.com
fotoslubna.com
markseymourphotography.co.uk
pays-saint-flour.fr
denhaagfoodie.nl
docarefoundation.org
fire-space.com
bruut.online
fixx-repair.com
angeleyezstripclub.com
quitescorting.com
alattekniksipil.com
aceroprime.com
veggienessa.com
efficiencyconsulting.es
crestgood.com
ygallerysalonsoho.com:443
supercarhire.co.uk
aquacheck.co.za
concontactodirecto.com
neolaiamedispa.com
successcolony.com.ng
kellengatton.com
speakaudible.com
uci-france.fr
lesyeuxbleus.net
aidanpublishing.co.uk
the-beauty-guides.com
pansionatblago.ru
groovedealers.ru
keuken-prijs.nl
ziliak.com
jlgraphisme.fr
animation-pro.co.uk
margaretmcshane.com
mrmac.com
hotjapaneselesbian.com
artcase.pl
kompresory-opravy.com
saberconcrete.com
awaisghauri.com
kdbrh.com
antesacademy.it
istantidigitali.com
fascaonline.com
skyboundnutrition.co.uk
thestudio.academy
sachainchiuk.com
rarefoods.ro
jollity.hu
onlinemarketingsurgery.co.uk
worldproskitour.com
blavait.fr
altocontatto.net
testitjavertailut.net
guohedd.com
silverbird.dk
alabamaroofingllc.com
ykobbqchicken.ca
cyberpromote.de
adterium.com
topautoinsurers.net
boloria.de
richardkershawwines.co.za
hepishopping.com
schulz-moelln.de
cainlaw-okc.com
chomiksy.net
salonlamar.nl
lexced.com
min-virksomhed.dk
ceocenters.com
atrgroup.it
awag-blog.de
strauchs-wanderlust.info
reizenmetkinderen.be
ikadomus.com
scotlandsroute66.co.uk
colored-shelves.com
nrgvalue.com
diakonie-weitramsdorf-sesslach.de
centuryvisionglobal.com
electricianul.com
christopherhannan.com
myfbateam.com
mayprogulka.ru
motocrossplace.co.uk
ayudaespiritualtamara.com
ntinasfiloxenia.gr
aktivfriskcenter.se
expohomes.com
powershell.su
rename.kz
craftron.com
mariamalmahdi.com
tradenavigator.ch
jefersonalessandro.com
noda.com.ua
greatofficespaces.net
jakubrybak.com
dr-vita.de
afbudsrejserallinclusive.dk
trivselsguide.dk
hostaletdelsindians.es
cssp-mediation.org
achetrabalhos.com
m2graph.fr
verbouwingsdouche.nl
omnicademy.com
rechtenplicht.be
acornishstudio.co.uk
creohn.de
photographycreativity.co.uk
look.academy
sarahspics.co.uk
rattanwarehouse.co.uk
piestar.com
jonnyhooley.com
berdonllp.com
futurenetworking.com
cuadc.org
apmollerpension.com
angelsmirrorus.com
fbmagazine.ru
kookooo.com
hutchstyle.co.uk
azloans.com
boyfriendsgoal.site
ingresosextras.online
wg-heiligenstadt.de
bd2fly.com
fanuli.com.au
advesa.com
thesilkroadny.com
delegationhub.com
martinipstudios.com
lattalvor.com
metriplica.academy
skolaprome.eu
corporacionrr.com
richardmaybury.co.uk
jobstomoveamerica.org
devplus.be
gazelle-du-web.com
g2mediainc.com
trainiumacademy.com
lovcase.com
ced-elec.com
eastgrinsteadwingchun.com
chatberlin.de
alharsunindo.com
thiagoperez.com
agenceassemble.fr
matteoruzzaofficial.com
autoteamlast.de
3daywebs.com
basindentistry.com
yourhappyevents.fr
mesajjongeren.nl
fluzfluzrewards.com
awaitspain.com
maxcube24.com.ua
nepressurecleaning.com
werkzeugtrolley.net
jimprattmediations.com
molinum.pt
explora.nl
buerocenter-butzbach-werbemittel.de
dinecorp.com
bcabattoirs.org
advance-refle.com
dreamvoiceclub.org
wineandgo.hu
campusescalade.com
billigeflybilletter.dk
glennverschueren.be
liveyourheartout.co
barbaramcfadyenjewelry.com
etgdogz.de
fotoeditores.com
loysonbryan.com
solutionshosting.co.uk
zealcon.ae
ninjaki.com
mariannelemenestrel.com
ox-home.com
xtensifi.com
iactechnologies.net
silkeight.com
eatyoveges.com
premier-iowa.com
nykfdyrehospital.dk
coachpreneuracademy.com
ijsselbeton.nl
midwestschool.org
glende-pflanzenparadies.de
gosouldeep.com
akcadagofis.com
mediogiro.com.ar
frimec-international.es
triavlete.com
chorusconsulting.net
auto-opel.ro
111firstdelray.com
renderbox.ch
janellrardon.com
casinodepositors.com
heimdalbygg.no
gaearoyals.com
citiscapes-art.com
rentingwell.com
cac2040.com
rubyaudiology.com
mgimalta.com
bulyginnikitav.000webhostapp.com
zwemofficial.nl
nxtstg.org
lunoluno.com
mieleshopping.it
dennisverschuur.com
eventosvirtualesexitosos.com
brannbornfastigheter.se
latteswithleslie.com
narca.net
jandhpest.com
adedesign.com
geoweb.software
5pointpt.com
zuerich-umzug.ch
albcleaner.fr
spartamovers.com
uncensoredhentaigif.com
limounie.com
citydogslife.com
edrickennedymacfoy.com
skinkeeper.li
trevi-vl.ru
parseport.com
beauty-traveller.com
bavovrienden.nl
nationnewsroom.com
leloupblanc.gr
sellthewrightway.com
secrets-clubs.co.uk
comoserescritor.com
initconf.com
mind2muscle.nl
opt4cdi.com
hostingbangladesh.net
luvbec.com
denverwynkoopdentist.com
lsngroupe.com
utilisacteur.fr
premiumweb.com.ua:443
luvinsburger.fr
anleggsregisteret.no
levelseven.be
mike.matthies.de
muller.nl
xn--80addfr4ahr.dp.ua
rhino-storage.co.uk
molade.nl
proffteplo.com
paardcentraal.nl
paprikapod.com
focuskontur.com
lidkopingsnytt.nu
collegetennis.info
rapid5kloan.org
leadforensics.com
rsidesigns.com
lollachiro.com
karmeliterviertel.com
framemyballs.com
cincinnatiphotocompany.org
arthakapitalforvaltning.dk
letterscan.de
xn--ziinoapte-6ld.ro
benchbiz.com
bilius.dk
humanviruses.org
mrcar.nl
promus.ca
line-x.co.uk
alcye.com
xrresources.com
blucamp.com
augen-praxisklinik-rostock.de
banksrl.co.za
hom-frisor.dk
jglconsultancy.com
slotenmakerszwijndrecht.nl
designimage.ae
ilovefullcircle.com
sharonalbrightdds.com
theatre-embellie.fr
orchardbrickwork.com
agora-collectivites.com
invela.dk
deduktia.fi
bumbipdeco.site
enactusnhlstenden.com
ideamode.com
fsbforsale.com
gbk-tp1.de
pureelements.nl
devus.de
sppdstats.com
2020hindsight.info
eurethicsport.eu
dayenne-styling.nl
iron-mine.ru
ivancacu.com
rozmata.com
natturestaurante.com.br
haus-landliebe.de
frameshift.it
enews-qca.com
affligemsehondenschool.be
nvisionsigns.com
metallbau-hartmann.eu
pinkxgayvideoawards.com
cops4causes.org
tweedekansenloket.nl
carmel-york.com
agrifarm.dk
forextimes.ru
otpusk.zp.ua
heuvelland-oaze.nl
azerbaycanas.com
ocduiblog.com
malevannye.ru
fridakids.com
n-newmedia.de
signededenroth.dk
stressreliefadvice.com
axisoflove.org:443
mbuildinghomes.com
campusce.com
triplettagaite.fr
michal-s.co.il
mariajosediazdemera.com
vipcarrental.ae
billscars.net
sycamoregreenapts.com
interlinkone.com
rizplakatjaya.com
sshomme.com
nauticmarine.dk
entdoctor-durban.com
mediahub.co.nz
globalskills.pt
sochi-okna23.ru
mensemetgesigte.co.za
smartercashsystem.com
andrealuchesi.it
biblica.com
babysitting-hk.helpergo.co
kerstliedjeszingen.nl
nexstagefinancial.com
buonabitare.com
kamin-somnium.de
dcc-eu.com
buzzneakers.com
johnsonweekly.com
kristianboennelykke.dk
factorywizuk.com
atma.nl
springfieldplumbermo.com
web865.com
forumsittard.nl
floweringsun.org
topvijesti.net
endstarvation.com
dierenambulancealkmaar.nl
tieronechic.com
stabilisateur.fr
csaballoons.com
bratek-immobilien.de
site.markkit.com.br
bagaholics.in
oththukaruva.com
sbit.ag
tilldeeke.de
gardenpartner.pl
ravage-webzine.nl
precisetemp.com
amyandzac.com
photonag.com
whoopingcrane.com
magnetvisual.com
profiz.com
xn--billigafrgpatroner-stb.se
saint-malo-developpement.fr
tages-geldvergleich.de
easydental.ae
eafx.pro
bjornvanvulpen.nl
cascinarosa33.it
louiedager.com
janasfokus.com
hiddensee-buhne11.de
myplaywin3.com
oexebusiness.com
tellthebell.website
scholarquotes.com
lyricalduniya.com
jobkiwi.com.ng
tecleados.com
jacquesgarcianoto.com
speiserei-hannover.de
bonitabeachassociation.com
dnqa.co.uk
mediabolmong.com
lovetzuchia.com
pubcon.com
matthieupetel.fr
specialtyhomeservicesllc.com
chainofhopeeurope.eu
curtsdiscountguns.com
cymru.futbol
volta.plus
zorgboerderijravensbosch.nl
levencovka.ru
domilivefurniture.com
bertbutter.nl
davedavisphotos.com
block-optic.com
kosten-vochtbestrijding.be
metroton.ru
penumbuhrambutkeiskei.com
pokemonturkiye.com
chatterchatterchatter.com
digitale-elite.de
carsten.sparen-it.de
test-teleachat.fr
linearete.com
victorvictoria.com
t3brothers.com
lumturo.academy
charlesfrancis.photos
jeanmonti.com
zaczytana.com
polynine.com
fann.ru
pourlabretagne.bzh
burg-zelem.de
ncn.nl
pharmeko-group.com
moira-cristescu.com
peppergreenfarmcatering.com.au
pinthelook.com
the3-week-diet.net
greeneyetattoo.com
dentallabor-luenen.de
auberives-sur-vareze.fr
sytzedevries.com
suonenjoen.fi
leansupremegarcinia.net
rivermusic.nl
johnkoen.com
avisioninthedesert.com
ciga-france.fr
so-sage.fr
spirello.nl
11.in.ua
baikalflot.ru
boomerslivinglively.com
almamidwifery.com
wyreforest.net
goddardleadership.org
breathebettertolivebetter.com
housesofwa.com
fysiotherapierijnmond.nl
alnectus.com
malzomattalar.com
dieetuniversiteit.nl
oraweb.net
janmorgenstern.com
spacebel.be
brownswoodblog.com
nicksrock.com
phoenixcrane.com
mikegoodfellow.co.uk
druktemakersheerenveen.nl
gatlinburgcottage.com
advanced-removals.co.uk
tanatek.com
kenmccallum.com
slideevents.be
cmeow.com
grancanariaregional.com
pixelhealth.net
ilveshistoria.com
gratiocafeblog.wordpress.com
raeoflightmusic.com
pajagus.fr
christianscholz.de
smartspeak.com
opticahubertruiz.com
qrs-international.com
ultimatelifesource.com
naukaip.ru
catchup-mag.com
redpebblephotography.com
alwaysdc.com
xn--80abehgab4ak0ddz.xn--p1ai
brisbaneosteopathic.com.au
bourchier.org
rs-danmark.dk
deziplan.ru
o2o-academy.com
santastoy.store
diverfiestas.com.es
livedeveloper.com
goodboyscustom.com
cp-bap.de
biodentify.ai
epicjapanart.com
julielusktherapy.com
patassociation.com
kiraribeaute-nani.com
k-v-f.de
placermonticello.com
baita.ac
solidhosting.nl
duthler.nl
craftstone.co.nz
internalresults.com
altitudeboise.com
pvandambv.nl
pazarspor.org.tr
hm-com.com
sambaglow.com
cc-experts.de
techybash.com
tbalp.co.uk
happycatering.de
hameghlim.com
globalcompliancenews.com
irizar.com
brinkdoepke.eu
cotton-avenue.co.il
unexplored.gr
innersurrection.com
nutriwell.com.sg
geitoniatonaggelon.gr
vedsegaard.dk
onlinetvgroup.com
drnelsonpediatrics.com
allinonecampaign.com
prometeyagro.com.ua
hinotruckwreckers.com.au
phukienbepthanhdat.com
agriturismocastagneto.it
jayfurnitureco.com
bluemarinefoundation.com
cookinn.nl
golfclublandgoednieuwkerk.nl
webforsites.com
the5thquestion.com
larchwoodmarketing.com
rvside.com
campinglaforetdetesse.com
inewsstar.com
mustangmarketinggroup.com
sololibrerie.it
atelierkomon.com
motocrosshideout.com
primemarineengineering.com
studionumerik.fr
dibli.store
muni.pe
ahgarage.com
bodymindchallenger.com
fla.se
mrkluttz.com
aciscomputers.com
latableacrepes-meaux.fr
rolleepollee.com
mslp.org
yuanshenghotel.com
hotelturbo.de
bubbalucious.com
georgemuncey.com
distrifresh.com
die-immo-agentur.de
graygreenbiomedservices.com
renehartman.nl
unislaw-narty.pl
galatee-couture.com
eshop.design
rishigangoly.com
eos-horlogerie.com
mahikuchen.com
imajyuku-sozoku.com
plbinsurance.com
napisat-pismo-gubernatoru.ru:443
fi-institutionalfunds.com
riffenmattgarage.ch
loparnille.se
stagefxinc.com
andreaskildegaard.dk
mac-computer-support-hamburg.de
funworx.de
goeppinger-teppichreinigung.de
lookandseen.com
sjtpo.org
stathmoulis.gr
holocine.de
bellesiniacademy.org
voice2biz.com
publicompserver.de
stoneridgemontessori.com
mundo-pieces-auto.fr
bohrlochversicherung.info
karelinjames.com
ronaldhendriks.nl
bluetenreich-brilon.de
belofloripa.be
sber-biznes.com
avis.mantova.it
ledyoucan.com
operativadigital.com
activeterroristwarningcompany.com
magrinya.net
bakingismyyoga.com
jag.me
toranjtuition.org
ramirezprono.com
stringnosis.academy
taulunkartano.fi
gavelmasters.com
chinowarehousespace.com
yvesdoin-aquarelles.fr
billyoart.com
kvetymichalovce.sk
belinda.af
bayshoreelite.com
weddingceremonieswithtim.com
c-sprop.com
sprintcoach.com
nepal-pictures.com
amorbellezaysalud.com
happylublog.wordpress.com
rossomattonecase.it
scentedlair.com
nevadaruralhousingstudies.org
medicalsupportco.com
jobscore.com
alexwenzel.de
terraflair.de
thehovecounsellingpractice.co.uk
akwaba-safaris.com
skoczynski.eu
smarttourism.academy
martha-frets-ceramics.nl
gurutechnologies.net
tesisatonarim.com
haard-totaal.nl
sealgrinderpt.com
mindsparkescape.com
rokthetalk.com
airvapourbarrier.com
cormanmarketing.com
chris-anne.com
agencewho-aixenprovence.fr
oscommunity.de
galaniuklaw.com
wribrazil.com
tothebackofthemoon.com
acb-gruppe.ch
teethinadaydentalimplants.com
perfectgrin.com
optigas.com
abulanov.com
michaelfiegel.com
clinic-beethovenstrasse-ag.ch
customroasts.com
directique.com
limmortelyouth.com
vdolg24.online
airserviceunlimited.com
frankgoll.com
cleanroomequipment.ie
shrinkingplanet.com
landgoedspica.nl
lifeinbreaths.com
catalyseurdetransformation.com
fskhjalmar.se
bajova.sk
zinnystar.com
jdscenter.com
oro.ae
singletonfinancial.com
palmenhaus-erfurt.de
lashandbrowenvy.com
watchsale.biz
hypogenforensic.com
manzel.tn
thepixelfairy.com
acumenconsultingcompany.com
vapiano.fr
makingmillionaires.net
clemenfoto.dk
jameswilliamspainting.com
glas-kuck.de
netadultere.fr
physio-lang.de
animalfood-online.de
husetsanitas.dk
donau-guides.eu
olry-cloisons.fr
birthplacemag.com
reygroup.pt
circuit-diagramz.com
eksperdanismanlik.com
pedmanson.com
ddmgen.com
livelai.com
nginx.com
bodet150ans.com
sweetz.fr
grafikstudio-visuell.de
palema.gr
evsynthacademy.org
legundschiess.de
carolynfriedlander.com
eyedoctordallas.com
mercadodelrio.com
mneti.ru
5thactors.com
redctei.co
beandrivingschool.com.au
b3b.ch
cl0nazepamblog.com
laaisterplakky.nl
texanscan.org
circlecitydj.com
condormobile.fr
adaduga.info
acibademmobil.com.tr
four-ways.com
johnstonmingmanning.com
metcalfe.ca
hospitalitytrainingsolutions.co.uk
shortysspices.com
spectamarketingdigital.com.br
randyabrown.com
neonodi.be
lisa-poncon.fr
tramadolhealth.com
marcandy.com
hensleymarketing.com
jmmartinezilustrador.com
tetameble.pl
gsconcretecoatings.com
cxcompany.com
kafkacare.com
mondolandscapes.com
skyscanner.ro
vitoriaecoturismo.com.br
nbva.co.uk
aslog.fr
dentalcircle.com
ncjc.ca
prodentalblue.com
tastevirginia.com
nieuwsindeklas.be
finnergo.eu
jlwilsonbooks.com
cardsandloyalty.com
andermattswisswatches.ch
ya-elka.ru
thegetawaycollective.com
charlottelhanna.com
stanleyqualitysystems.com
ikzoekgod.be
domaine-des-pothiers.com
anchelor.com
projektparkiet.pl
purepreprod4.com
rtc24.com
iexpert99.com
o90.dk
bookingwheel.com
outstandingminialbums.com
wallflowersandrakes.com
energosbit-rp.ru
greenrider.nl
theater-lueneburg.de
log-barn.co.uk
theboardroomafrica.com
rino-gmbh.com
palmecophilippines.com
hawaiisteelbuilding.com
go.labibini.ch
hawthornsretirement.co.uk
professionetata.com
kelsigordon.com
valiant-voice.com
klapanvent.ru
tutvracks.com
ronielyn.com
der-stempelking.de
krishnabrawijaya.com
alpesiberie.com
ludoil.it
suitesartemis.gr
sunsolutions.es
envomask.com
walterman.es
profibersan.com
kausette.com
cesep2019.com
maryairbnb.wordpress.com
epsondriversforwindows.com
broccolisoep.nl
dmlcpa.com
queertube.net
khtrx.com
harleystreetspineclinic.com
wrinstitute.org
alisodentalcare.com
qandmmusiccenter.com
poems-for-the-soul.ch
arabianmice.com
teutoradio.de
bridalcave.com
liverpoolabudhabi.ae
wirmuessenreden.com
bmw-i-pure-impulse.com
zdrowieszczecin.pl
peninggibadan.co.id
kemtron.fr
adabible.org
claudiakilian.de
alltagsrassismus-entknoten.de
soundseeing.net
dentourage.com
schluesseldienste-hannover.de
vvego.com
annida.it
1deals.com
wordpress.idium.no
towelroot.co
ownidentity.com
finsahome.co.uk
direitapernambuco.com
ufovidmag.com
lapponiasafaris.com
unboxtherapy.site
kickittickets.com
catering.com
tzn.nu
teamsegeln.ch
goodherbalhealth.com
from02pro.com
littlesaints.academy
traitware.com
hnkns.com
schlagbohrmaschinetests.com
bundan.com
bg.szczecin.pl
parentsandkids.com
thegrinningmanmusical.com
dantreranch.com
zumrutkuyutemel.com
grupoexin10.com
aberdeenartwalk.org
asiaartgallery.jp
sveneulberg.de
laylavalentine.com
mursall.de
monstarrsoccer.com
insane.agency
omegamarbella.com
newonestop.com
nalliasmali.net
putzen-reinigen.com
hvitfeldt.dk
leijstrom.com
turing.academy
triplettabordeaux.fr
startuplive.org
slotspinner.com
qwikcoach.com
bluelakevision.com
descargandoprogramas.com
foerderverein-vatterschule.de
lassocrm.com
signamedia.de
skooppi.fi
richardiv.com
kartuindonesia.com
factoriareloj.com
apogeeconseils.fr
pisofare.co
juergenblaetz.de
linkbuilding.life
theintellect.edu.pk
computer-place.de
osn.ro
selected-minds.de
endlessrealms.net
imagine-entertainment.com
cap29010.it
reputation-medical.online
a-zpaperwork.eu
therapybusinessacademy.com
miscbo.it
saboboxtel.uk
leatherjees.com
girlish.ae
lmmont.sk
oncarrot.com
mazift.dk
amelielecompte.wordpress.com
bychowo.pl
schroederschoembs.com
katherinealy.com
elliemaccreative.wordpress.com
datatri.be
skidpiping.de
kryptos72.com
universelle.fr
espaciopolitica.com
simpleitsolutions.ch
logosindustries.com
kryddersnapsen.dk
craftingalegacy.com
radishallgood.com
ketomealprep.academy
alaskaremote.com
artvark.nl
handyman-silkeborg.dk
innervisions-id.com
global-migrate.com
soncini.ch
yourcosmicbeing.com
bendel-partner.de
licensed-public-adjuster.com
drvoip.com
koncept-m.ru
alene.co
wasnederland.nl
amco.net.au
rentsportsequip.com
subquercy.fr
p-ride.live
baumfinancialservices.com
flossmoordental.com
kombi-dress.com
baptistdistinctives.org
the-cupboard.co.uk
fazagostar.co
jaaphoekzema.nl
edvestors.org
dinedrinkdetroit.com
liepertgrafikweb.at
smartworkplaza.com
kuriero.pro
fidelitytitleoregon.com
angelika-schwarz.com
parksideseniorliving.net
yournextshoes.com
fta-media.com
bringmehope.org
-
net
true
-
pid
28
-
prc
ocautoupds
winword
synctime
excel
steam
thunderbird
firefox
tbirdconfig
outlook
wordpa
visio
encsvc
ocssd
mydesktopqos
mspub
mydesktopservice
thebat
msaccess
infopath
xfssvccon
agntsvc
isqlplussvc
dbsnmp
powerpnt
dbeng50
ocomm
oracle
onenote
sqbcoreservice
sql
-
ransom_oneliner
All of your files are encrypted! Find {EXT}_Wannadie.txt and follow instructions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
1513
-
svc
veeam
backup
memtas
mepocs
sophos
vss
sql
svc$
Extracted
C:\i4837_Wannadie.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/D42FDF09FDCBD268
http://decryptor.top/D42FDF09FDCBD268
Extracted
C:\a58q50o_Wannadie.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/CAE6068BD15003F0
http://decryptor.top/CAE6068BD15003F0
Targets
-
-
Target
4808d86fd26fa9e62a959f6cb31ca2334cba8b834b6287fd72bd512eee6e1880
-
Size
164KB
-
MD5
f0284d4e56bde839b8b440a949928c90
-
SHA1
588210f0932ba9edb88f2f0fdd6163f6c671bf35
-
SHA256
4808d86fd26fa9e62a959f6cb31ca2334cba8b834b6287fd72bd512eee6e1880
-
SHA512
0ce3d5c8e2ea534630ed3fb4b05dddc1710c44abc7b522f19ddd418e2c66c78f463429d13fddc6fdd5c050dc315395985a90d79530c008ac5b6207db0cabec2b
Score10/10-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
Sets desktop wallpaper using registry
-