Static task
static1
Behavioral task
behavioral1
Sample
0bdfcbb90cbf47af585c0c34565398f372f35f23cfbb095ecfa54b7d40818b82.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
0bdfcbb90cbf47af585c0c34565398f372f35f23cfbb095ecfa54b7d40818b82.exe
Resource
win10v2004-20220414-en
General
-
Target
0bdfcbb90cbf47af585c0c34565398f372f35f23cfbb095ecfa54b7d40818b82
-
Size
164KB
-
MD5
ca6dc0610e9dbcc3d5608cac7b15318c
-
SHA1
7966baaf4acbf33c60a5bd7a9ea1640c783183c2
-
SHA256
0bdfcbb90cbf47af585c0c34565398f372f35f23cfbb095ecfa54b7d40818b82
-
SHA512
573f84cf40ef1536b384ee45f40ea99b431341efc93cb11f34453c045c1239556d706d9dfa97d7d24913003a50b45ff35cb91f55ebaedb0137dc3b49507603b1
-
SSDEEP
3072:WGYFrOdhfkQv9jrAprhFmyvEjQDKaUznxQaETSb7j0Kv:QadFkMGhFjED39ATA7jb
Malware Config
Extracted
sodinokibi
19
96
acibademmobil.com.tr
avis.mantova.it
salonlamar.nl
bumbipdeco.site
duthler.nl
qandmmusiccenter.com
globalcompliancenews.com
invela.dk
bookingwheel.com
narca.net
scholarquotes.com
sppdstats.com
veggienessa.com
ceocenters.com
lashandbrowenvy.com
medicalsupportco.com
jobscore.com
internestdigital.com
martha-frets-ceramics.nl
vdolg24.online
finnergo.eu
mangimirossana.it
mediahub.co.nz
quitescorting.com
latteswithleslie.com
biblica.com
wrinstitute.org
concontactodirecto.com
coachpreneuracademy.com
xn--billigafrgpatroner-stb.se
acornishstudio.co.uk
frimec-international.es
victorvictoria.com
claudiakilian.de
digitale-elite.de
traitware.com
ciga-france.fr
belinda.af
hoteltantra.com
oportowebdesign.com
janmorgenstern.com
lmmont.sk
cascinarosa33.it
therapybusinessacademy.com
elitkeramika-shop.com.ua
pourlabretagne.bzh
devus.de
ncjc.ca
photonag.com
casinodepositors.com
thesilkroadny.com
elliemaccreative.wordpress.com
ced-elec.com
tchernia-conseil.fr
leatherjees.com
itheroes.dk
innervisions-id.com
groovedealers.ru
lisa-poncon.fr
rvside.com
chatterchatterchatter.com
brinkdoepke.eu
metroton.ru
hartofurniture.com
latableacrepes-meaux.fr
descargandoprogramas.com
oscommunity.de
malevannye.ru
andermattswisswatches.ch
ledyoucan.com
bajova.sk
campusescalade.com
bavovrienden.nl
cuadc.org
banukumbak.com
vapiano.fr
verbouwingsdouche.nl
2020hindsight.info
antesacademy.it
nrgvalue.com
randyabrown.com
trainiumacademy.com
brighthillgroup.com
directique.com
pajagus.fr
paardcentraal.nl
opt4cdi.com
husetsanitas.dk
explora.nl
cormanmarketing.com
pokemonturkiye.com
sweetz.fr
condormobile.fr
the5thquestion.com
parentsandkids.com
look.academy
innovationgames-brabant.nl
ahgarage.com
bodet150ans.com
alaskaremote.com
slotspinner.com
jalkapuu.net
omegamarbella.com
limounie.com
kemtron.fr
block-optic.com
augen-praxisklinik-rostock.de
charlottelhanna.com
acb-gruppe.ch
cc-experts.de
mariannelemenestrel.com
kroophold-sjaelland.dk
annenymus.com
hypogenforensic.com
volta.plus
schlagbohrmaschinetests.com
slotenmakerszwijndrecht.nl
livedeveloper.com
agenceassemble.fr
carolynfriedlander.com
handyman-silkeborg.dk
stitch-n-bitch.com
taulunkartano.fi
the3-week-diet.net
greenrider.nl
ikadomus.com
cp-bap.de
internalresults.com
richardkershawwines.co.za
billscars.net
radishallgood.com
kamin-somnium.de
eos-horlogerie.com
pays-saint-flour.fr
rossomattonecase.it
harleystreetspineclinic.com
altocontatto.net
nykfdyrehospital.dk
neolaiamedispa.com
johnkoen.com
mahikuchen.com
jameswilliamspainting.com
lovetzuchia.com
zdrowieszczecin.pl
unexplored.gr
energosbit-rp.ru
memphishealthandwellness.com
mediabolmong.com
mundo-pieces-auto.fr
xn--ziinoapte-6ld.ro
qwikcoach.com
mercadodelrio.com
towelroot.co
furland.ru
pazarspor.org.tr
werkzeugtrolley.net
eurethicsport.eu
bakingismyyoga.com
ownidentity.com
dreamvoiceclub.org
b3b.ch
ilveshistoria.com
almamidwifery.com
tages-geldvergleich.de
eyedoctordallas.com
leadforensics.com
bayshoreelite.com
atelierkomon.com
neonodi.be
imajyuku-sozoku.com
wyreforest.net
kookooo.com
dentourage.com
loysonbryan.com
purepreprod4.com
jax-interim-and-projectmanagement.com
agora-collectivites.com
n-newmedia.de
campusce.com
happylublog.wordpress.com
justaroundthecornerpetsit.com
springfieldplumbermo.com
aciscomputers.com
cops4causes.org
animalfood-online.de
spectamarketingdigital.com.br
achetrabalhos.com
perceptdecor.com
ninjaki.com
mondolandscapes.com
ox-home.com
agriturismocastagneto.it
napisat-pismo-gubernatoru.ru:443
goeppinger-teppichreinigung.de
nationnewsroom.com
drbenveniste.com
walterman.es
bluetenreich-brilon.de
kryddersnapsen.dk
kompresory-opravy.com
parseport.com
pixelhealth.net
rishigangoly.com
skooppi.fi
stoneridgemontessori.com
asiaartgallery.jp
thisprettyhair.com
mrcar.nl
jobkiwi.com.ng
aslog.fr
sshomme.com
bratek-immobilien.de
silverbird.dk
liveyourheartout.co
tatyanakopieva.ru
karmeliterviertel.com
leopoldineroux.com
globalskills.pt
sachainchiuk.com
test-teleachat.fr
jimprattmediations.com
direitapernambuco.com
catchup-mag.com
heuvelland-oaze.nl
phukienbepthanhdat.com
skoczynski.eu
dnqa.co.uk
leansupremegarcinia.net
istantidigitali.com
corporacionrr.com
fbmagazine.ru
jacquesgarcianoto.com
funworx.de
marcandy.com
piestar.com
yourhappyevents.fr
bychowo.pl
bellesiniacademy.org
mneti.ru
fla.se
banksrl.co.za
5thactors.com
pvandambv.nl
ziliak.com
satoblog.org
basindentistry.com
c-sprop.com
onlinemarketingsurgery.co.uk
jakubrybak.com
thenalpa.com
patriotcleaning.net
sber-biznes.com
go.labibini.ch
tetameble.pl
tramadolhealth.com
oncarrot.com
poems-for-the-soul.ch
pankiss.ru
oththukaruva.com
adedesign.com
bubbalucious.com
eventosvirtualesexitosos.com
eshop.design
fann.ru
paradigmlandscape.com
encounter-p.net
activeterroristwarningcompany.com
mariamalmahdi.com
spacebel.be
metcalfe.ca
wineandgo.hu
imaginekithomes.co.nz
90nguyentuan.com
airserviceunlimited.com
tilldeeke.de
sycamoregreenapts.com
diverfiestas.com.es
advance-refle.com
a-zpaperwork.eu
hawthornsretirement.co.uk
chorusconsulting.net
holocine.de
smartercashsystem.com
egpu.fr
bridalcave.com
greatofficespaces.net
limmortelyouth.com
aquacheck.co.za
myfbateam.com
ravage-webzine.nl
drnelsonpediatrics.com
cincinnatiphotocompany.org
theater-lueneburg.de
rolleepollee.com
saint-malo-developpement.fr
alattekniksipil.com
stringnosis.academy
wordpress.idium.no
liepertgrafikweb.at
production-stills.co.uk
triplettabordeaux.fr
jollity.hu
irizar.com
iron-mine.ru
buerocenter-butzbach-werbemittel.de
expohomes.com
amorbellezaysalud.com
baikalflot.ru
forumsittard.nl
stanleyqualitysystems.com
ivancacu.com
cyberpromote.de
dr-vita.de
catalyseurdetransformation.com
foerderverein-vatterschule.de
hiddensee-buhne11.de
mindsparkescape.com
dieetuniversiteit.nl
lgiwines.com
nepressurecleaning.com
ocduiblog.com
oraweb.net
jonnyhooley.com
speakaudible.com
prometeyagro.com.ua
relevantonline.eu
ingresosextras.online
cymru.futbol
factoriareloj.com
proffteplo.com
fluzfluzrewards.com
birthplacemag.com
mazift.dk
lunoluno.com
tbalp.co.uk
julielusktherapy.com
deziplan.ru
happycatering.de
citiscapes-art.com
paprikapod.com
operativadigital.com
jag.me
sealgrinderpt.com
scentedlair.com
worldproskitour.com
ddmgen.com
kausette.com
brannbornfastigheter.se
floweringsun.org
ludoil.it
kenmccallum.com
espaciopolitica.com
hawaiisteelbuilding.com
skyboundnutrition.co.uk
yayasanprimaunggul.org
goodboyscustom.com
watchsale.biz
elex.is
webforsites.com
fta-media.com
peninggibadan.co.id
andrealuchesi.it
annida.it
riffenmattgarage.ch
mieleshopping.it
g2mediainc.com
animation-pro.co.uk
buffdaddyblog.com
ronielyn.com
adaduga.info
sprintcoach.com
breakluckrecords.com
denverwynkoopdentist.com
benchbiz.com
the-cupboard.co.uk
rivermusic.nl
altitudeboise.com
autoteamlast.de
ayudaespiritualtamara.com
weddingceremonieswithtim.com
cxcompany.com
rename.kz
inewsstar.com
hekecrm.com
signamedia.de
edrickennedymacfoy.com
louiedager.com
innersurrection.com
jglconsultancy.com
skyscanner.ro
artcase.pl
pro-gamer.pl
orchardbrickwork.com
lidkopingsnytt.nu
profibersan.com
zuerich-umzug.ch
tzn.nu
laaisterplakky.nl
arearugcleaningnyc.com
p-ride.live
onlinetvgroup.com
stathmoulis.gr
prodentalblue.com
wirmuessenreden.com
blueridgeheritage.com
kuriero.pro
sambaglow.com
fskhjalmar.se
nieuwsindeklas.be
collegetennis.info
georgemuncey.com
thepixelfairy.com
nauticmarine.dk
axisoflove.org:443
bundan.com
zealcon.ae
fixx-repair.com
karelinjames.com
alpesiberie.com
thehovecounsellingpractice.co.uk
ruggestar.ch
maxcube24.com.ua
kickittickets.com
secrets-clubs.co.uk
heimdalbygg.no
dibli.store
rarefoods.ro
line-x.co.uk
bcabattoirs.org
mindfuelers.com
agendatwentytwenty.com
wallflowersandrakes.com
klapanvent.ru
hvitfeldt.dk
glennverschueren.be
circuit-diagramz.com
polynine.com
levelseven.be
four-ways.com
zorgboerderijravensbosch.nl
dogsunlimitedguide.com
iactechnologies.net
lollachiro.com
zumrutkuyutemel.com
11.in.ua
palmenhaus-erfurt.de
mazzaropi.com.br
amelielecompte.wordpress.com
biketruck.de
natturestaurante.com.br
aktivfriskcenter.se
arthakapitalforvaltning.dk
kosten-vochtbestrijding.be
singletonfinancial.com
distrifresh.com
chainofhopeeurope.eu
richardiv.com
pilotgreen.com
111firstdelray.com
hensleymarketing.com
baptistdistinctives.org
breathebettertolivebetter.com
cac2040.com
abulanov.com
tieronechic.com
theintellect.edu.pk
letterscan.de
housesofwa.com
fascaonline.com
bcmets.info
9nar.com
brisbaneosteopathic.com.au
stressreliefadvice.com
noda.com.ua
mensemetgesigte.co.za
nevadaruralhousingstudies.org
omnicademy.com
peppergreenfarmcatering.com.au
welovecustomers.fr
kristianboennelykke.dk
putzen-reinigen.com
gosouldeep.com
morgansconsult.com
glende-pflanzenparadies.de
global-migrate.com
signededenroth.dk
oro.ae
nexstagefinancial.com
masecologicos.com
zwemofficial.nl
midwestschool.org
studionumerik.fr
skidpiping.de
angelsmirrorus.com
osn.ro
lookandseen.com
utilisacteur.fr
graygreenbiomedservices.com
publicompserver.de
afbudsrejserallinclusive.dk
curtsdiscountguns.com
clinic-beethovenstrasse-ag.ch
teutoradio.de
fysiotherapierijnmond.nl
switch-made.com
guohedd.com
schluesseldienste-hannover.de
molinum.pt
endstarvation.com
transifer.fr
mjk.digital
mike.matthies.de
craftron.com
livelai.com
hostastay.com
web865.com
csaballoons.com
rechtenplicht.be
techybash.com
yournextshoes.com
craftstone.co.nz
whoopingcrane.com
bonitabeachassociation.com
goddardleadership.org
dayenne-styling.nl
cotton-avenue.co.il
carsten.sparen-it.de
domilivefurniture.com
rapid5kloan.org
pinkxgayvideoawards.com
mayprogulka.ru
creohn.de
blucamp.com
simpleitsolutions.ch
fitnessblenderstory.com
aberdeenartwalk.org
drbrianhweeks.com
bmw-i-pure-impulse.com
burg-zelem.de
lyricalduniya.com
katherinealy.com
factorywizuk.com
redctei.co
landgoedspica.nl
mslp.org
entdoctor-durban.com
christopherhannan.com
janasfokus.com
muller.nl
smartmind.net
vvego.com
ilovefullcircle.com
uci-france.fr
terraflair.de
oexebusiness.com
margaretmcshane.com
hnkns.com
redpebblephotography.com
manzel.tn
motocrossplace.co.uk
biodentify.ai
docarefoundation.org
successcolony.com.ng
andreaskildegaard.dk
markseymourphotography.co.uk
dinedrinkdetroit.com
juergenblaetz.de
fazagostar.co
bd2fly.com
brunoimmobilier.com
parisschool.ru
frameshift.it
lsngroupe.com
beauty-traveller.com
hostingbangladesh.net
nvisionsigns.com
akcadagofis.com
solidhosting.nl
netadultere.fr
olry-cloisons.fr
placermonticello.com
broccolisoep.nl
bringmehope.org
ramirezprono.com
rtc24.com
hm-com.com
shrinkingplanet.com
mrkluttz.com
xrresources.com
nutriwell.com.sg
bodymindchallenger.com
atma.nl
aidanpublishing.co.uk
phoenixcrane.com
advancedeyecare.com
rizplakatjaya.com
physio-lang.de
adabible.org
hospitalitytrainingsolutions.co.uk
arazi.eus
newonestop.com
ijsselbeton.nl
edvestors.org
belofloripa.be
patassociation.com
mamajenedesigns.com
3daywebs.com
loparnille.se
dierenambulancealkmaar.nl
gbk-tp1.de
alabamaroofingllc.com
santastoy.store
ya-elka.ru
donau-guides.eu
computer-place.de
chinowarehousespace.com
sololibrerie.it
vipcarrental.ae
renderbox.ch
devplus.be
fsbforsale.com
from02pro.com
zaczytana.com
cesep2019.com
hom-frisor.dk
palmecophilippines.com
comoserescritor.com
amyandzac.com
forextimes.ru
barbaramcfadyenjewelry.com
krishnabrawijaya.com
baumfinancialservices.com
kvetymichalovce.sk
ultimatelifesource.com
keyboardjournal.com
cap29010.it
avtoboss163.ru:443
fi-institutionalfunds.com
daveystownhouse.com
lagschools.ng
shortsalemap.com
beandrivingschool.com.au
eatyoveges.com
wademurray.com
cl0nazepamblog.com
reputation-medical.online
betterce.com
o90.dk
vedsegaard.dk
advesa.com
ikzoekgod.be
myplaywin3.com
nalliasmali.net
stagefxinc.com
fotoeditores.com
clemenfoto.dk
golfclublandgoednieuwkerk.nl
diakonie-weitramsdorf-sesslach.de
sjtpo.org
gazelle-du-web.com
akwaba-safaris.com
auto-opel.ro
kryptos72.com
molade.nl
iexpert99.com
skinkeeper.li
etgdogz.de
logosindustries.com
mbuildinghomes.com
atrgroup.it
christianscholz.de
catering.com
efficiencyconsulting.es
racefietsenblog.nl
bertbutter.nl
pedmanson.com
charlesfrancis.photos
angelika-schwarz.com
gsconcretecoatings.com
nepal-pictures.com
maryairbnb.wordpress.com
powershell.su
awaisghauri.com
fidelitytitleoregon.com
linearete.com
muni.pe
smartspeak.com
alcye.com
bulyginnikitav.000webhostapp.com
m2graph.fr
specialtyhomeservicesllc.com
onesynergyinternational.com
photographycreativity.co.uk
interlinkone.com
kombi-dress.com
kafkacare.com
delegationhub.com
rentingwell.com
skolaprome.eu
pinthelook.com
kartuindonesia.com
texanscan.org
finsahome.co.uk
mrmac.com
tweedekansenloket.nl
motocrosshideout.com
teamsegeln.ch
nginx.com
dentallabor-luenen.de
pansionatblago.ru
jobstomoveamerica.org
subyard.com
ronaldhendriks.nl
amco.net.au
electricianul.com
strauchs-wanderlust.info
selected-minds.de
professionetata.com
anleggsregisteret.no
letsstopsmoking.co.uk
sharonalbrightdds.com
gatlinburgcottage.com
mediogiro.com.ar
supercarhire.co.uk
bohrlochversicherung.info
carmel-york.com
linkbuilding.life
yvesdoin-aquarelles.fr
renehartman.nl
cookinn.nl
miscbo.it
1deals.com
reygroup.pt
kdbrh.com
albcleaner.fr
mac-computer-support-hamburg.de
fotoslubna.com
testitjavertailut.net
toranjtuition.org
arabianmice.com
o2o-academy.com
schroederschoembs.com
rubyaudiology.com
greeneyetattoo.com
makingmillionaires.net
qrs-international.com
nbva.co.uk
matteoruzzaofficial.com
stralsund-ansichten.de
palema.gr
tothebackofthemoon.com
sochi-okna23.ru
laylavalentine.com
alexwenzel.de
luvbec.com
richardmaybury.co.uk
stabilisateur.fr
bendel-partner.de
saberconcrete.com
chomiksy.net
artvark.nl
sytzedevries.com
soncini.ch
dennisverschuur.com
kellengatton.com
bluelakevision.com
envomask.com
reizenmetkinderen.be
malzomattalar.com
ntinasfiloxenia.gr
fire-space.com
bilius.dk
theatre-embellie.fr
modamarfil.com
triplettagaite.fr
jaaphoekzema.nl
girlish.ae
imagine-entertainment.com
pureelements.nl
affligemsehondenschool.be
sunsolutions.es
sellthewrightway.com
otpusk.zp.ua
bagaholics.in
haard-totaal.nl
silkeight.com
xtensifi.com
marmarabasin.com
rokthetalk.com
thegetawaycollective.com
buzzneakers.com
mikegoodfellow.co.uk
kerstliedjeszingen.nl
tellthebell.website
gavelmasters.com
nuohous.com
tastevirginia.com
denhaagfoodie.nl
glas-kuck.de
buonabitare.com
teethinadaydentalimplants.com
agencewho-aixenprovence.fr
airvapourbarrier.com
avisioninthedesert.com
voetbalhoogeveen.nl
jdscenter.com
optigas.com
epsondriversforwindows.com
jmmartinezilustrador.com
vitoriaecoturismo.com.br
yourcosmicbeing.com
topvijesti.net
suitesartemis.gr
thestudio.academy
leloupblanc.gr
craftingalegacy.com
ncn.nl
opticahubertruiz.com
grancanariaregional.com
astrographic.com
witraz.pl
domaine-des-pothiers.com
rozmata.com
outstandingminialbums.com
sbit.ag
cmeow.com
promus.ca
the-beauty-guides.com
schulz-moelln.de
auberives-sur-vareze.fr
spirello.nl
protoplay.ca
slideevents.be
aheadloftladders.co.uk
framemyballs.com
eksperdanismanlik.com
plbinsurance.com
moira-cristescu.com
cardsandloyalty.com
nxtstg.org
lassocrm.com
geitoniatonaggelon.gr
drvoip.com
rhino-storage.co.uk
subquercy.fr
chatberlin.de
min-virksomhed.dk
vitormmcosta.com
startuplive.org
alene.co
primemarineengineering.com
k-v-f.de
gardenpartner.pl
cssp-mediation.org
penumbuhrambutkeiskei.com
thegrinningmanmusical.com
jeanmonti.com
tanatek.com
enews-qca.com
legundschiess.de
citydogslife.com
eafx.pro
baita.ac
spartamovers.com
trevi-vl.ru
tradenavigator.ch
levencovka.ru
die-immo-agentur.de
hotelturbo.de
naukaip.ru
metallbau-hartmann.eu
ufovidmag.com
yuanshenghotel.com
initconf.com
alltagsrassismus-entknoten.de
berdonllp.com
awaitspain.com
alharsunindo.com
turing.academy
wasnederland.nl
dcc-eu.com
dantreranch.com
insane.agency
crestgood.com
circlecitydj.com
adterium.com
apogeeconseils.fr
bruut.online
alnectus.com
lapponiasafaris.com
wribrazil.com
k-zubki.ru
luvinsburger.fr
mesajjongeren.nl
enactusnhlstenden.com
futurenetworking.com
indiebizadvocates.org
askstaffing.com
hinotruckwreckers.com.au
mursall.de
keuken-prijs.nl
dmlcpa.com
speiserei-hannover.de
jefersonalessandro.com
martinipstudios.com
mustangmarketinggroup.com
grafikstudio-visuell.de
endlessrealms.net
eastgrinsteadwingchun.com
lovcase.com
jlwilsonbooks.com
focuskontur.com
magrinya.net
haus-landliebe.de
hepishopping.com
lesyeuxbleus.net
humanviruses.org
5pointpt.com
gratiocafeblog.wordpress.com
deduktia.fi
janellrardon.com
tecleados.com
rs-danmark.dk
zinnystar.com
solutionshosting.co.uk
alisodentalcare.com
michaelfiegel.com
unislaw-narty.pl
monstarrsoccer.com
magnetvisual.com
frankgoll.com
advanced-removals.co.uk
cainlaw-okc.com
stage-infirmier.fr
colored-shelves.com
premier-iowa.com
evsynthacademy.org
azloans.com
xn--80addfr4ahr.dp.ua
acumenconsultingcompany.com
profiz.com
customroasts.com
projektparkiet.pl
lifeinbreaths.com
matthieupetel.fr
soundseeing.net
rsidesigns.com
apiarista.de
sveneulberg.de
khtrx.com
designimage.ae
pisofare.co
koncept-m.ru
raeoflightmusic.com
forskolinslimeffect.net
campinglaforetdetesse.com
nicksrock.com
suonenjoen.fi
galaniuklaw.com
littlesaints.academy
cmascd.com
scotlandsroute66.co.uk
lumturo.academy
bg.szczecin.pl
agrifarm.dk
sarahspics.co.uk
gurutechnologies.net
saboboxtel.uk
ideamode.com
jlgraphisme.fr
datatri.be
jandhpest.com
davedavisphotos.com
dentalcircle.com
jayfurnitureco.com
dinecorp.com
hutchstyle.co.uk
rentsportsequip.com
nourella.com
mgimalta.com
premiumweb.com.ua:443
billyoart.com
kelsigordon.com
mollymccarthydesign.com
goodherbalhealth.com
liverpoolabudhabi.ae
precisetemp.com
pubcon.com
kiraribeaute-nani.com
gta-jjb.fr
metriplica.academy
fanuli.com.au
babysitting-hk.helpergo.co
fridakids.com
trivselsguide.dk
brownswoodblog.com
blavait.fr
allinonecampaign.com
uncensoredhentaigif.com
bluemarinefoundation.com
shortysspices.com
bourchier.org
rino-gmbh.com
queertube.net
easydental.ae
bjornvanvulpen.nl
thiagoperez.com
angeleyezstripclub.com
johnsonweekly.com
geoweb.software
alwaysdc.com
aceroprime.com
chris-anne.com
gaearoyals.com
unboxtherapy.site
boomerslivinglively.com
hotjapaneselesbian.com
mind2muscle.nl
der-stempelking.de
ebible.co
pxsrl.it
apmollerpension.com
smarttourism.academy
wg-heiligenstadt.de
aoyama.ac
awag-blog.de
johnstonmingmanning.com
centuryvisionglobal.com
bescomedical.de
hameghlim.com
triavlete.com
site.markkit.com.br
theboardroomafrica.com
tesisatonarim.com
flossmoordental.com
michal-s.co.il
business-basic.de
grupoexin10.com
ketomealprep.academy
pharmeko-group.com
rattanwarehouse.co.uk
cleanroomequipment.ie
boloria.de
universelle.fr
topautoinsurers.net
ygallerysalonsoho.com:443
epicjapanart.com
scietech.academy
lexced.com
billigeflybilletter.dk
mariajosediazdemera.com
valiant-voice.com
galatee-couture.com
perfectgrin.com
voice2biz.com
xn--80abehgab4ak0ddz.xn--p1ai
parksideseniorliving.net
larchwoodmarketing.com
smartworkplaza.com
boyfriendsgoal.site
t3brothers.com
leijstrom.com
lattalvor.com
rhino-turf.com
hostaletdelsindians.es
licensed-public-adjuster.com
druktemakersheerenveen.nl
tutvracks.com
ykobbqchicken.ca
anchelor.com
azerbaycanas.com
so-sage.fr
log-barn.co.uk
-
net
true
-
pid
19
-
prc
excel
xfssvccon
mydesktopservice
msftesql
sqlbrowser
thebat64
mydesktopqos
infopath
mysqld
visio
dbsnmp
mysqld_opt
firefoxconfig
sqlservr
ocssd
tbirdconfig
thebat
mysqld_nt
sqbcoreservice
wordpad
ocautoupds
oracle
synctime
ocomm
winword
encsvc
powerpnt
thunderbird
outlook
sqlwriter
mspub
steam
msaccess
onenote
isqlplussvc
agntsvc
dbeng50
sqlagent
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on you computer has expansion {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
96
-
svc
svc$
backup
vss
sophos
memtas
sql
veeam
mepocs
Signatures
-
Sodinokibi family
Files
-
0bdfcbb90cbf47af585c0c34565398f372f35f23cfbb095ecfa54b7d40818b82.exe windows x86
c88f20b29592f2107a629e815db6afae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.z2iai Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ