General
-
Target
r2
-
Size
2.5MB
-
Sample
220702-zndmasbgc2
-
MD5
c4a44ec88e88d01e47686db31fc5f9a5
-
SHA1
36dbbe158a7011b2d87ed633fce7bc88f2b0e993
-
SHA256
4908807108ece32a951425e8cf63e272be098ead31095d927f09f5381cd22bcb
-
SHA512
36b932094607da13e8992cb0c17e23a5e075eec26bf97a68db230c78b5f99a409f305ba474fe0d81795bc352c11b2ba63b3eb5da061e60309c5c43adc32a30d7
Static task
static1
Behavioral task
behavioral1
Sample
r2.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
C:\fc0rk-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/4F937DC1A666AFBF
http://decryptor.cc/4F937DC1A666AFBF
Extracted
sodinokibi
$2a$10$7kfNCF64xjGI7TQisGA.zerKuqyEtd2SpcNkILuWtf652Pqdp0hTa
1428
charlottepoudroux-photographie.fr
cactusthebrand.com
cleliaekiko.online
kostenlose-webcams.com
groupe-frayssinet.fr
colorofhorses.com
pointos.com
mariposapropaneaz.com
alysonhoward.com
associacioesportivapolitg.cat
socstrp.org
pmc-services.de
binder-buerotechnik.at
firstpaymentservices.com
happyeasterimages.org
dubscollective.com
pier40forall.org
littlebird.salon
kaotikkustomz.com
jacquin-maquettes.com
123vrachi.ru
centromarysalud.com
zewatchers.com
igorbarbosa.com
eco-southafrica.com
kafu.ch
leather-factory.co.jp
icpcnj.org
sagadc.com
crediacces.com
mbfagency.com
kalkulator-oszczednosci.pl
mir-na-iznanku.com
igrealestate.com
olejack.ru
humanityplus.org
global-kids.info
jvanvlietdichter.nl
gaiam.nl
carriagehousesalonvt.com
rimborsobancario.net
dpo-as-a-service.com
loprus.pl
cuspdental.com
schlafsack-test.net
zimmerei-deboer.de
exenberger.at
otsu-bon.com
plv.media
mirkoreisser.de
foretprivee.ca
y-archive.com
filmvideoweb.com
garage-lecompte-rouen.fr
ilso.net
suncrestcabinets.ca
parkcf.nl
naswrrg.org
monark.com
highlinesouthasc.com
caribbeansunpoker.com
webhostingsrbija.rs
interactcenter.org
hypozentrum.com
buymedical.biz
hhcourier.com
commercialboatbuilding.com
sanyue119.com
drinkseed.com
smokeysstoves.com
levdittliv.se
ilive.lt
braffinjurylawfirm.com
mediaacademy-iraq.org
finediningweek.pl
enovos.de
boosthybrid.com.au
fibrofolliculoma.info
rocketccw.com
tonelektro.nl
asteriag.com
evangelische-pfarrgemeinde-tuniberg.de
toponlinecasinosuk.co.uk
globedivers.wordpress.com
sportverein-tambach.de
2ekeus.nl
hairnetty.wordpress.com
lescomtesdemean.be
dr-tremel-rednitzhembach.de
mrsfieldskc.com
hatech.io
starsarecircular.org
tips.technology
norpol-yachting.com
bodyforwife.com
alten-mebel63.ru
nandistribution.nl
csgospeltips.se
zweerscreatives.nl
verbisonline.com
wacochamber.com
connectedace.com
rksbusiness.com
noesis.tech
tastewilliamsburg.com
zimmerei-fl.de
insigniapmg.com
assurancesalextrespaille.fr
bastutunnan.se
mooshine.com
corelifenutrition.com
chavesdoareeiro.com
goodgirlrecovery.com
marathonerpaolo.com
precisionbevel.com
chrissieperry.com
ino-professional.ru
memaag.com
diversiapsicologia.es
jakekozmor.com
easytrans.com.au
thenewrejuveme.com
pay4essays.net
evergreen-fishing.com
calxplus.eu
rhinosfootballacademy.com
ivivo.es
villa-marrakesch.de
romeguidedvisit.com
fitnessingbyjessica.com
all-turtles.com
sweering.fr
pubweb.carnet.hr
worldhealthbasicinfo.com
lebellevue.fr
daniel-akermann-architektur-und-planung.ch
securityfmm.com
www1.proresult.no
foryourhealth.live
lubetkinmediacompanies.com
bradynursery.com
fotoscondron.com
unetica.fr
catholicmusicfest.com
croftprecision.co.uk
cafemattmeera.com
figura.team
onlyresultsmarketing.com
slimani.net
marketingsulweb.com
victoriousfestival.co.uk
narcert.com
testcoreprohealthuk.com
tampaallen.com
advokathuset.dk
sipstroysochi.ru
gasolspecialisten.se
sojamindbody.com
kadesignandbuild.co.uk
refluxreducer.com
hihaho.com
joyeriaorindia.com
schmalhorst.de
trapiantofue.it
mrsplans.net
new.devon.gov.uk
dw-css.de
itelagen.com
jolly-events.com
jerling.de
aglend.com.au
modamilyon.com
brawnmediany.com
hellohope.com
iqbalscientific.com
kidbucketlist.com.au
blossombeyond50.com
wychowanieprzedszkolne.pl
coding-machine.com
shadebarandgrillorlando.com
iwelt.de
1kbk.com.ua
readberserk.com
jameskibbie.com
jobcenterkenya.com
executiveairllc.com
spylista.com
wurmpower.at
sinal.org
zenderthelender.com
ouryoungminds.wordpress.com
clos-galant.com
d2marketing.co.uk
drugdevice.org
newyou.at
gw2guilds.org
fotoideaymedia.es
insidegarage.pl
christ-michael.net
fatfreezingmachines.com
nhadatcanho247.com
naturalrapids.com
ventti.com.ar
fannmedias.com
i-arslan.de
danskretursystem.dk
corola.es
twohourswithlena.wordpress.com
acomprarseguidores.com
ussmontanacommittee.us
sportiomsportfondsen.nl
lorenacarnero.com
besttechie.com
heidelbergartstudio.gallery
35-40konkatsu.net
digivod.de
conasmanagement.de
planchaavapor.net
entopic.com
izzi360.com
summitmarketingstrategies.com
rosavalamedahr.com
iviaggisonciliegie.it
smartypractice.com
theduke.de
rerekatu.com
alsace-first.com
danubecloud.com
hoteledenpadova.it
prochain-voyage.net
galleryartfair.com
broseller.com
ohidesign.com
anteniti.com
thomasvicino.com
sauschneider.info
devok.info
irinaverwer.com
austinlchurch.com
vihannesporssi.fi
nacktfalter.de
bundabergeyeclinic.com.au
aco-media.nl
insp.bi
citymax-cr.com
d1franchise.com
nosuchthingasgovernment.com
stoeferlehalle.de
elimchan.com
trackyourconstruction.com
tophumanservicescourses.com
body-guards.it
sevenadvertising.com
theclubms.com
roygolden.com
ilcdover.com
rebeccarisher.com
bridgeloanslenders.com
baronloan.org
marietteaernoudts.nl
deepsouthclothingcompany.com
oneheartwarriors.at
crowcanyon.com
jusibe.com
anybookreader.de
fayrecreations.com
rota-installations.co.uk
greenko.pl
elpa.se
beaconhealthsystem.org
agence-referencement-naturel-geneve.net
calabasasdigest.com
admos-gleitlager.de
myhealth.net.au
caffeinternet.it
merzi.info
compliancesolutionsstrategies.com
mank.de
friendsandbrgrs.com
jbbjw.com
healthyyworkout.com
psa-sec.de
vdberg-autoimport.nl
myteamgenius.com
newstap.com.ng
morawe-krueger.de
cyntox.com
liikelataamo.fi
koken-voor-baby.nl
kissit.ca
huehnerauge-entfernen.de
irishmachineryauctions.com
koko-nora.dk
urmasiimariiuniri.ro
pv-design.de
tinkoff-mobayl.ru
financescorecard.com
idemblogs.com
hotelsolbh.com.br
socialonemedia.com
vloeren-nu.nl
myzk.site
hexcreatives.co
minipara.com
wien-mitte.co.at
whittier5k.com
rehabilitationcentersinhouston.net
nokesvilledentistry.com
shiftinspiration.com
levihotelspa.fi
paulisdogshop.de
allfortheloveofyou.com
cimanchesterescorts.co.uk
humancondition.com
dr-pipi.de
botanicinnovations.com
nakupunafoundation.org
homesdollar.com
thailandholic.com
deko4you.at
caribdoctor.org
simoneblum.de
bargningharnosand.se
bee4win.com
parkstreetauto.net
grupocarvalhoerodrigues.com.br
supportsumba.nl
run4study.com
bricotienda.com
hugoversichert.de
drfoyle.com
beyondmarcomdotcom.wordpress.com
nvwoodwerks.com
journeybacktolife.com
xn--fnsterputssollentuna-39b.se
argenblogs.com.ar
abogadosaccidentetraficosevilla.es
nmiec.com
candyhouseusa.com
boompinoy.com
oneplusresource.org
you-bysia.com.au
makeurvoiceheard.com
101gowrie.com
lascuola.nl
steampluscarpetandfloors.com
hebkft.hu
uimaan.fi
ora-it.de
shhealthlaw.com
marcuswhitten.site
edrcreditservices.nl
allentownpapershow.com
artotelamsterdam.com
erstatningsadvokaterne.dk
hannah-fink.de
forskolorna.org
chandlerpd.com
bptdmaluku.com
urist-bogatyr.ru
mapawood.com
symphonyenvironmental.com
makeflowers.ru
psc.de
odiclinic.org
kirkepartner.dk
unim.su
effortlesspromo.com
phantastyk.com
fairfriends18.de
vesinhnha.com.vn
pickanose.com
transportesycementoshidalgo.es
actecfoundation.org
real-estate-experts.com
denifl-consulting.at
dezatec.es
delawarecorporatelaw.com
sotsioloogia.ee
tenacitytenfold.com
cortec-neuro.com
durganews.com
syndikat-asphaltfieber.de
coffreo.biz
lapinvihreat.fi
kindersitze-vergleich.de
asgestion.com
pridoxmaterieel.nl
craftleathermnl.com
chatizel-paysage.fr
aurum-juweliere.de
montrium.com
dareckleyministries.com
deschl.net
abitur-undwieweiter.de
milestoneshows.com
cerebralforce.net
ziegler-praezisionsteile.de
projetlyonturin.fr
id-vet.com
darrenkeslerministries.com
blood-sports.net
neuschelectrical.co.za
miraclediet.fun
parks-nuernberg.de
zervicethai.co.th
harpershologram.wordpress.com
carlosja.com
wraithco.com
bouquet-de-roses.com
kojinsaisei.info
portoesdofarrobo.com
live-your-life.jp
seevilla-dr-sturm.at
creative-waves.co.uk
roadwarrior.app
markelbroch.com
burkert-ideenreich.de
ampisolabergeggi.it
teczowadolina.bytom.pl
fransespiegels.nl
faizanullah.com
sandd.nl
rostoncastings.co.uk
lange.host
tennisclubetten.nl
crowd-patch.co.uk
toreria.es
controldekk.com
bigler-hrconsulting.ch
hardinggroup.com
adoptioperheet.fi
manutouchmassage.com
testzandbakmetmening.online
lapmangfpt.info.vn
digi-talents.com
malychanieruchomoscipremium.com
vanswigchemdesign.com
abuelos.com
ceres.org.au
serce.info.pl
ungsvenskarna.se
pferdebiester.de
ftlc.es
harveybp.com
fizzl.ru
southeasternacademyofprosthodontics.org
abl1.net
thee.network
groupe-cets.com
resortmtn.com
frontierweldingllc.com
tandartspraktijkhartjegroningen.nl
trulynolen.co.uk
seminoc.com
kenhnoithatgo.com
comarenterprises.com
offroadbeasts.com
handi-jack-llc.com
kojima-shihou.com
sw1m.ru
answerstest.ru
lmtprovisions.com
aprepol.com
lukeshepley.wordpress.com
cursosgratuitosnainternet.com
musictreehouse.net
ateliergamila.com
mytechnoway.com
filmstreamingvfcomplet.be
spsshomeworkhelp.com
vyhino-zhulebino-24.ru
waynela.com
qualitus.com
mepavex.nl
theletter.company
otto-bollmann.de
wsoil.com.sg
space.ua
selfoutlet.com
stoneys.ch
patrickfoundation.net
macabaneaupaysflechois.com
milltimber.aberdeen.sch.uk
rollingrockcolumbia.com
despedidascostablanca.es
mediaclan.info
accountancywijchen.nl
ligiercenter-sachsen.de
fiscalsort.com
heurigen-bauer.at
importardechina.info
pixelarttees.com
heliomotion.com
iyahayki.nl
allamatberedare.se
logopaedie-blomberg.de
bigbaguettes.eu
facettenreich27.de
instatron.net
architecturalfiberglass.org
officehymy.com
antiaginghealthbenefits.com
sahalstore.com
liveottelut.com
degroenetunnel.com
tetinfo.in
bierensgebakkramen.nl
saarland-thermen-resort.com
myhostcloud.com
smogathon.com
maasreusel.nl
freie-baugutachterpraxis.de
autopfand24.de
geekwork.pl
wolf-glas-und-kunst.de
jorgobe.at
intecwi.com
simpkinsedwards.co.uk
live-con-arte.de
sterlingessay.com
lichencafe.com
webmaster-peloton.com
ceid.info.tr
ncid.bc.ca
katiekerr.co.uk
pocket-opera.de
mooglee.com
autodemontagenijmegen.nl
ihr-news.jp
vietlawconsultancy.com
mousepad-direkt.de
troegs.com
kmbshipping.co.uk
airconditioning-waalwijk.nl
freie-gewerkschaften.de
biortaggivaldelsa.com
psnacademy.in
vetapharma.fr
thaysa.com
xn--thucmctc-13a1357egba.com
baumkuchenexpo.jp
employeesurveys.com
galserwis.pl
hushavefritid.dk
oceanastudios.com
celularity.com
maureenbreezedancetheater.org
presseclub-magdeburg.de
thomas-hospital.de
solinegraphic.com
kuntokeskusrok.fi
dushka.ua
corona-handles.com
cranleighscoutgroup.org
coding-marking.com
saxtec.com
henricekupper.com
nicoleaeschbachorg.wordpress.com
ecopro-kanto.com
carrybrands.nl
kamahouse.net
tux-espacios.com
creamery201.com
urclan.net
tarotdeseidel.com
first-2-aid-u.com
vorotauu.ru
yourobgyn.net
imaginado.de
zonamovie21.net
verifort-capital.de
coursio.com
hashkasolutindo.com
maratonaclubedeportugal.com
notsilentmd.org
pinkexcel.com
eraorastudio.com
puertamatic.es
judithjansen.com
tomoiyuma.com
drnice.de
spargel-kochen.de
sachnendoc.com
maxadams.london
augenta.com
layrshift.eu
thewellnessmimi.com
petnest.ir
arteservicefabbro.com
c2e-poitiers.com
copystar.co.uk
mediaplayertest.net
strandcampingdoonbeg.com
iyengaryogacharlotte.com
streamerzradio1.site
smhydro.com.pl
jobmap.at
abogados-en-alicante.es
maineemploymentlawyerblog.com
slashdb.com
parebrise-tla.fr
nestor-swiss.ch
jasonbaileystudio.com
expandet.dk
brevitempore.net
familypark40.com
oldschoolfun.net
forestlakeuca.org.au
tandartspraktijkheesch.nl
milsing.hr
uranus.nl
americafirstcommittee.org
gopackapp.com
woodleyacademy.org
ontrailsandboulevards.com
kevinjodea.com
tstaffing.nl
woodworkersolution.com
funjose.org.gt
almosthomedogrescue.dog
synlab.lt
luckypatcher-apkz.com
herbstfeststaefa.ch
xn--singlebrsen-vergleich-nec.com
team-montage.dk
klusbeter.nl
polymedia.dk
htchorst.nl
anthonystreetrimming.com
allure-cosmetics.at
commonground-stories.com
tulsawaterheaterinstallation.com
mountaintoptinyhomes.com
gporf.fr
vibethink.net
remcakram.com
geoffreymeuli.com
waermetauscher-berechnen.de
mymoneyforex.com
ralister.co.uk
westdeptfordbuyrite.com
danholzmann.com
reddysbakery.com
blog.solutionsarchitect.guru
muamuadolls.com
webcodingstudio.com
radaradvies.nl
yousay.site
n1-headache.com
jyzdesign.com
meusharklinithome.wordpress.com
verytycs.com
sairaku.net
atozdistribution.co.uk
fitnessbazaar.com
iphoneszervizbudapest.hu
hkr-reise.de
ccpbroadband.com
zso-mannheim.de
div-vertriebsforschung.de
nurturingwisdom.com
pogypneu.sk
ditog.fr
cnoia.org
simpliza.com
amerikansktgodis.se
upplandsspar.se
no-plans.com
modelmaking.nl
artallnightdc.com
artige.com
camsadviser.com
cite4me.org
midmohandyman.com
extraordinaryoutdoors.com
vitalyscenter.es
proudground.org
jadwalbolanet.info
corendonhotels.com
manifestinglab.com
12starhd.online
ulyssemarketing.com
bingonearme.org
winrace.no
retroearthstudio.com
latribuessentielle.com
1team.es
spd-ehningen.de
sla-paris.com
smalltownideamill.wordpress.com
quemargrasa.net
igfap.com
flexicloud.hk
raschlosser.de
kath-kirche-gera.de
ra-staudte.de
stormwall.se
theshungiteexperience.com.au
jenniferandersonwriter.com
krcove-zily.eu
shonacox.com
sarbatkhalsafoundation.org
daklesa.de
wellplast.se
nsec.se
em-gmbh.ch
dubnew.com
grelot-home.com
revezlimage.com
atmos-show.com
helenekowalsky.com
mountsoul.de
work2live.de
surespark.org.uk
mirjamholleman.nl
modestmanagement.com
deprobatehelp.com
aakritpatel.com
tuuliautio.fi
gantungankunciakrilikbandung.com
krlosdavid.com
gratispresent.se
mardenherefordshire-pc.gov.uk
stemplusacademy.com
linnankellari.fi
dinslips.se
lusak.at
poultrypartners.nl
better.town
ai-spt.jp
campusoutreach.org
comparatif-lave-linge.fr
tomaso.gr
thefixhut.com
babcockchurch.org
andersongilmour.co.uk
hiddencitysecrets.com.au
brigitte-erler.com
qualitaetstag.de
ikads.org
zflas.com
ausbeverage.com.au
datacenters-in-europe.com
cuppacap.com
physiofischer.de
notmissingout.com
amylendscrestview.com
id-et-d.fr
huissier-creteil.com
girlillamarketing.com
herbayupro.com
blewback.com
klimt2012.info
mbxvii.com
lecantou-coworking.com
faronics.com
rafaut.com
brandl-blumen.de
personalenhancementcenter.com
ruralarcoiris.com
echtveilig.nl
advizewealth.com
zieglerbrothers.de
mindpackstudios.com
micro-automation.de
katketytaanet.fi
christinarebuffetcourses.com
pcprofessor.com
havecamerawilltravel2017.wordpress.com
bsaship.com
nativeformulas.com
gasbarre.com
marchand-sloboda.com
mooreslawngarden.com
knowledgemuseumbd.com
latestmodsapks.com
pt-arnold.de
manijaipur.com
cursoporcelanatoliquido.online
profectis.de
themadbotter.com
baptisttabernacle.com
lefumetdesdombes.com
kaliber.co.jp
leoben.at
aunexis.ch
miriamgrimm.de
dr-seleznev.com
consultaractadenacimiento.com
evologic-technologies.com
solhaug.tk
centrospgolega.com
ogdenvision.com
sexandfessenjoon.wordpress.com
c-a.co.in
peterstrobos.com
birnam-wood.com
veybachcenter.de
smale-opticiens.nl
vancouver-print.ca
sanaia.com
abogadosadomicilio.es
falcou.fr
eglectonk.online
the-virtualizer.com
classycurtainsltd.co.uk
conexa4papers.trade
skanah.com
alvinschwartz.wordpress.com
basisschooldezonnewijzer.nl
milanonotai.it
antonmack.de
lloydconstruction.com
schutting-info.nl
restaurantesszimmer.de
lykkeliv.net
piajeppesen.dk
transliminaltribe.wordpress.com
edgewoodestates.org
extensionmaison.info
mezhdu-delom.ru
cirugiauretra.es
dutchbrewingcoffee.com
homecomingstudio.com
plotlinecreative.com
satyayoga.de
dublikator.com
celeclub.org
the-domain-trader.com
vannesteconstruct.be
partnertaxi.sk
philippedebroca.com
aodaichandung.com
werkkring.nl
coastalbridgeadvisors.com
cityorchardhtx.com
haremnick.com
waveneyrivercentre.co.uk
theapifactory.com
strategicstatements.com
mrxermon.de
vermoote.de
lightair.com
shsthepapercut.com
365questions.org
helikoptervluchtnewyork.nl
smart-light.co.uk
solerluethi-allart.ch
pierrehale.com
boisehosting.net
qlog.de
truenyc.co
bauertree.com
berliner-versicherungsvergleich.de
schraven.de
bordercollie-nim.nl
nijaplay.com
web.ion.ag
smessier.com
tanzschule-kieber.de
faroairporttransfers.net
praxis-management-plus.de
hotelzentral.at
polychromelabs.com
argos.wityu.fund
yassir.pro
purposeadvisorsolutions.com
stupbratt.no
body-armour.online
bigasgrup.com
lucidinvestbank.com
juneauopioidworkgroup.org
berlin-bamboo-bikes.org
lbcframingelectrical.com
gmto.fr
ausair.com.au
skiltogprint.no
campus2day.de
joseconstela.com
withahmed.com
podsosnami.ru
cheminpsy.fr
embracinghiscall.com
craigvalentineacademy.com
quizzingbee.com
bouldercafe-wuppertal.de
lillegrandpalais.com
beautychance.se
fundaciongregal.org
seproc.hn
kamienny-dywan24.pl
launchhubl.com
osterberg.fi
imadarchid.com
plastidip.com.ar
microcirc.net
ncs-graphic-studio.com
longislandelderlaw.com
esope-formation.fr
bildungsunderlebnis.haus
smithmediastrategies.com
boldcitydowntown.com
epwritescom.wordpress.com
gadgetedges.com
liliesandbeauties.org
videomarketing.pro
deoudedorpskernnoordwijk.nl
centuryrs.com
4net.guru
danielblum.info
stefanpasch.me
bogdanpeptine.ro
kikedeoliveira.com
backstreetpub.com
senson.fi
xlarge.at
DupontSellsHomes.com
panelsandwichmadrid.es
bafuncs.org
appsformacpc.com
mdk-mediadesign.de
asiluxury.com
pawsuppetlovers.com
jiloc.com
nataschawessels.com
pasvenska.se
sportsmassoren.com
stallbyggen.se
kedak.de
aarvorg.com
vickiegrayimages.com
noixdecocom.fr
stingraybeach.com
punchbaby.com
craigmccabe.fun
analiticapublica.es
plantag.de
simplyblessedbykeepingitreal.com
softsproductkey.com
promalaga.es
michaelsmeriglioracing.com
iwr.nl
euro-trend.pl
eadsmurraypugh.com
triggi.de
baustb.de
ianaswanson.com
biapi-coaching.fr
dirittosanitario.biz
rushhourappliances.com
hrabritelefon.hr
operaslovakia.sk
fitovitaforum.com
justinvieira.com
ecpmedia.vn
directwindowco.com
tradiematepro.com.au
slupetzky.at
international-sound-awards.com
renergysolution.com
kosterra.com
bodyfulls.com
hvccfloorcare.com
xltyu.com
gastsicht.de
yamalevents.com
noskierrenteria.com
people-biz.com
chefdays.de
songunceliptv.com
ymca-cw.org.uk
dnepr-beskid.com.ua
farhaani.com
apolomarcas.com
karacaoglu.nl
tanciu.com
mylolis.com
bimnapratica.com
balticdermatology.lt
vox-surveys.com
talentwunder.com
madinblack.com
jsfg.com
travelffeine.com
blogdecachorros.com
bloggyboulga.net
love30-chanko.com
mmgdouai.fr
naturavetal.hr
finde-deine-marke.de
visiativ-industry.fr
dlc.berlin
seitzdruck.com
moveonnews.com
parking.netgateway.eu
cwsitservices.co.uk
x-ray.ca
promesapuertorico.com
wasmachtmeinfonds.at
leda-ukraine.com.ua
seagatesthreecharters.com
crosspointefellowship.church
tanzprojekt.com
paradicepacks.com
walter-lemm.de
xn--fn-kka.no
destinationclients.fr
aminaboutique247.com
architekturbuero-wagner.net
mercantedifiori.com
completeweddingkansas.com
pivoineetc.fr
rieed.de
outcomeisincome.com
stoeberstuuv.de
fensterbau-ziegler.de
sloverse.com
zzyjtsgls.com
huesges-gruppe.de
dutchcoder.nl
kampotpepper.gives
stemenstilte.nl
nachhilfe-unterricht.com
castillobalduz.es
educar.org
alfa-stroy72.com
saka.gr
thedresserie.com
mastertechengineering.com
ctrler.cn
scenepublique.net
spinheal.ru
bargningavesta.se
tigsltd.com
houseofplus.com
xn--logopdie-leverkusen-kwb.de
autodujos.lt
naturstein-hotte.de
richard-felix.co.uk
navyfederalautooverseas.com
mikeramirezcpa.com
slimidealherbal.com
luxurytv.jp
hmsdanmark.dk
micahkoleoso.de
lynsayshepherd.co.uk
bookspeopleplaces.com
teresianmedia.org
bxdf.info
waywithwords.net
kariokids.com
geisterradler.de
vibehouse.rw
licor43.de
whyinterestingly.ru
pasivect.co.uk
tinyagency.com
stampagrafica.es
sabel-bf.com
highimpactoutdoors.net
kisplanning.com.au
slwgs.org
ecoledansemulhouse.fr
nancy-informatique.fr
ledmes.ru
blgr.be
boulderwelt-muenchen-west.de
tecnojobsnet.com
servicegsm.net
thedad.com
kunze-immobilien.de
bockamp.com
devstyle.org
wari.com.pe
teknoz.net
julis-lsa.de
todocaracoles.com
shiresresidential.com
spectrmash.ru
schoolofpassivewealth.com
ncuccr.org
labobit.it
greenpark.ch
leeuwardenstudentcity.nl
pomodori-pizzeria.de
triactis.com
dontpassthepepper.com
bbsmobler.se
rumahminangberdaya.com
ostheimer.at
samnewbyjax.com
chaotrang.com
bouncingbonanza.com
gemeentehetkompas.nl
tongdaifpthaiphong.net
ftf.or.at
torgbodenbollnas.se
apprendrelaudit.com
walkingdeadnj.com
makeitcount.at
aniblinova.wordpress.com
i-trust.dk
hairstylesnow.site
innote.fi
stopilhan.com
praxis-foerderdiagnostik.de
8449nohate.org
blacksirius.de
xtptrack.com
greenfieldoptimaldentalcare.com
turkcaparbariatrics.com
atalent.fi
polzine.net
lenreactiv-shop.ru
courteney-cox.net
oslomf.no
pcp-nc.com
vitavia.lt
adultgamezone.com
limassoldriving.com
ravensnesthomegoods.com
xn--rumung-bua.online
oncarrot.com
bayoga.co.uk
siliconbeach-realestate.com
smejump.co.th
mylovelybluesky.com
carolinepenn.com
autofolierung-lu.de
xoabigail.com
jeanlouissibomana.com
dekkinngay.com
charlesreger.com
antenanavi.com
dramagickcom.wordpress.com
ivfminiua.com
eaglemeetstiger.de
kaminscy.com
321play.com.hk
norovirus-ratgeber.de
lapinlviasennus.fi
johnsonfamilyfarmblog.wordpress.com
art2gointerieurprojecten.nl
jandaonline.com
haar-spange.com
simulatebrain.com
desert-trails.com
systemate.dk
bristolaeroclub.co.uk
alhashem.net
glennroberts.co.nz
bowengroup.com.au
buroludo.nl
baylegacy.com
bunburyfreightservices.com.au
abogadoengijon.es
spacecitysisters.org
devlaur.com
maryloutaylor.com
balticdentists.com
delchacay.com.ar
perbudget.com
deltacleta.cat
edv-live.de
wmiadmin.com
tsklogistik.eu
ahouseforlease.com
theadventureedge.com
stacyloeb.com
nuzech.com
sofavietxinh.com
blumenhof-wegleitner.at
platformier.com
gonzalezfornes.es
onlybacklink.com
denovofoodsgroup.com
takeflat.com
trystana.com
gymnasedumanagement.com
kingfamily.construction
behavioralmedicinespecialists.com
agence-chocolat-noir.com
rozemondcoaching.nl
porno-gringo.com
pelorus.group
quickyfunds.com
dsl-ip.de
paymybill.guru
collaborativeclassroom.org
xn--vrftet-pua.biz
edelman.jp
higadograsoweb.com
fax-payday-loans.com
upmrkt.co
schoellhammer.com
oemands.dk
siluet-decor.ru
gamesboard.info
lionware.de
sporthamper.com
hokagestore.com
ladelirante.fr
mrtour.site
bhwlawfirm.com
kao.at
opatrovanie-ako.sk
aselbermachen.com
darnallwellbeing.org.uk
bestbet.com
pmcimpact.com
imperfectstore.com
ki-lowroermond.nl
femxarxa.cat
lachofikschiet.nl
associationanalytics.com
homng.net
mdacares.com
penco.ie
sobreholanda.com
4youbeautysalon.com
-
net
true
-
pid
$2a$10$7kfNCF64xjGI7TQisGA.zerKuqyEtd2SpcNkILuWtf652Pqdp0hTa
-
prc
isqlplussvc
dbeng50
ocssd
sqbcoreservice
mysqld_nt
mysqld_opt
mysqld
onenote
firefoxconfig
thebat
ocomm
mspub
infopath
visio
mydesktopservice
synctime
msftesql
sqlagent
tbirdconfig
outlook
mydesktopqos
dbsnmp
agntsvc
sqlwriter
xfssvccon
powerpnt
thebat64
msaccess
winword
ocautoupds
thunderbird
wordpad
sqlservr
oracle
excel
encsvc
steam
sqlbrowser
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on you computer has expansion {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.cc/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
1428
-
svc
veeam
memtas
sql
vss
backup
sophos
mepocs
svc$
Targets
-
-
Target
r2
-
Size
2.5MB
-
MD5
c4a44ec88e88d01e47686db31fc5f9a5
-
SHA1
36dbbe158a7011b2d87ed633fce7bc88f2b0e993
-
SHA256
4908807108ece32a951425e8cf63e272be098ead31095d927f09f5381cd22bcb
-
SHA512
36b932094607da13e8992cb0c17e23a5e075eec26bf97a68db230c78b5f99a409f305ba474fe0d81795bc352c11b2ba63b3eb5da061e60309c5c43adc32a30d7
-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-