General
-
Target
861bc212241bcac9f8095c8de1b180.bin
-
Size
161KB
-
Sample
220714-khdyjsegdm
-
MD5
e6566f78abf3075ebea6fd037803e176
-
SHA1
de960051530de0ec06b72b8e3e1cb558e09a1c77
-
SHA256
861bc212241bcac9f8095c8de1b180b398057cbb2d37c9220086ffaf24ba9e08
-
SHA512
8c648916151d7515899b142a982ba530881245a709bf146861f0d4b1e460fc9bd6ff4df40f8fe29533c3f01c9df25cc5333f9a1a8159d7db70e80fc269fea2e8
Static task
static1
Behavioral task
behavioral1
Sample
861bc212241bcac9f8095c8de1b180.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
861bc212241bcac9f8095c8de1b180.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
sodinokibi
33
331
pays-saint-flour.fr
hartofurniture.com
tages-geldvergleich.de
margaretmcshane.com
production-stills.co.uk
omegamarbella.com
energosbit-rp.ru
descargandoprogramas.com
rsidesigns.com
mundo-pieces-auto.fr
mustangmarketinggroup.com
dinedrinkdetroit.com
sarahspics.co.uk
alaskaremote.com
chatterchatterchatter.com
qrs-international.com
belinda.af
bringmehope.org
tramadolhealth.com
animalfood-online.de
shrinkingplanet.com
adedesign.com
lsngroupe.com
outstandingminialbums.com
citiscapes-art.com
lapponiasafaris.com
the3-week-diet.net
altocontatto.net
lifeinbreaths.com
goeppinger-teppichreinigung.de
kemtron.fr
from02pro.com
operativadigital.com
tutvracks.com
klapanvent.ru
advancedeyecare.com
mamajenedesigns.com
luvinsburger.fr
redpebblephotography.com
factorywizuk.com
haard-totaal.nl
dogsunlimitedguide.com
juergenblaetz.de
pazarspor.org.tr
phoenixcrane.com
chorusconsulting.net
qwikcoach.com
larchwoodmarketing.com
acumenconsultingcompany.com
ykobbqchicken.ca
cormanmarketing.com
diakonie-weitramsdorf-sesslach.de
go.labibini.ch
breakluckrecords.com
sololibrerie.it
eventosvirtualesexitosos.com
tetameble.pl
ddmgen.com
campinglaforetdetesse.com
noda.com.ua
happycatering.de
landgoedspica.nl
innervisions-id.com
saboboxtel.uk
dieetuniversiteit.nl
christianscholz.de
devus.de
wineandgo.hu
spartamovers.com
strauchs-wanderlust.info
mariannelemenestrel.com
michal-s.co.il
physio-lang.de
palema.gr
bourchier.org
pansionatblago.ru
rokthetalk.com
stressreliefadvice.com
phukienbepthanhdat.com
gratiocafeblog.wordpress.com
sambaglow.com
dentallabor-luenen.de
utilisacteur.fr
georgemuncey.com
customroasts.com
unboxtherapy.site
keuken-prijs.nl
mazift.dk
signededenroth.dk
avis.mantova.it
purepreprod4.com
cookinn.nl
biodentify.ai
janellrardon.com
o2o-academy.com
johnsonweekly.com
frimec-international.es
profibersan.com
eyedoctordallas.com
jag.me
mazzaropi.com.br
blueridgeheritage.com
michaelfiegel.com
lexced.com
bridalcave.com
amco.net.au
linearete.com
ceocenters.com
myplaywin3.com
photonag.com
triplettabordeaux.fr
111firstdelray.com
wg-heiligenstadt.de
theintellect.edu.pk
denhaagfoodie.nl
zdrowieszczecin.pl
finnergo.eu
latableacrepes-meaux.fr
signamedia.de
unislaw-narty.pl
racefietsenblog.nl
basindentistry.com
veggienessa.com
rivermusic.nl
chinowarehousespace.com
proffteplo.com
m2graph.fr
hinotruckwreckers.com.au
askstaffing.com
fotoslubna.com
trivselsguide.dk
bakingismyyoga.com
diverfiestas.com.es
sjtpo.org
bruut.online
cp-bap.de
eatyoveges.com
xrresources.com
campusce.com
hm-com.com
sprintcoach.com
lmmont.sk
omnicademy.com
ramirezprono.com
mike.matthies.de
zumrutkuyutemel.com
heimdalbygg.no
bohrlochversicherung.info
imajyuku-sozoku.com
ufovidmag.com
blavait.fr
richardkershawwines.co.za
reygroup.pt
parseport.com
markseymourphotography.co.uk
rename.kz
triavlete.com
sochi-okna23.ru
kroophold-sjaelland.dk
mindsparkescape.com
licensed-public-adjuster.com
neonodi.be
glennverschueren.be
enews-qca.com
voetbalhoogeveen.nl
hepishopping.com
globalskills.pt
queertube.net
initconf.com
metallbau-hartmann.eu
nexstagefinancial.com
arazi.eus
animation-pro.co.uk
the-beauty-guides.com
business-basic.de
vdolg24.online
colored-shelves.com
valiant-voice.com
switch-made.com
jakubrybak.com
chomiksy.net
elliemaccreative.wordpress.com
laylavalentine.com
ruggestar.ch
riffenmattgarage.ch
innovationgames-brabant.nl
ideamode.com
protoplay.ca
pourlabretagne.bzh
fridakids.com
tothebackofthemoon.com
clinic-beethovenstrasse-ag.ch
teutoradio.de
circuit-diagramz.com
atelierkomon.com
mrcar.nl
baita.ac
fitnessblenderstory.com
cincinnatiphotocompany.org
unexplored.gr
min-virksomhed.dk
alcye.com
liveyourheartout.co
placermonticello.com
stagefxinc.com
1deals.com
zwemofficial.nl
mslp.org
voice2biz.com
internestdigital.com
9nar.com
molinum.pt
glende-pflanzenparadies.de
anchelor.com
cops4causes.org
specialtyhomeservicesllc.com
linkbuilding.life
ninjaki.com
speiserei-hannover.de
itheroes.dk
explora.nl
cxcompany.com
tanatek.com
campusescalade.com
thegrinningmanmusical.com
raeoflightmusic.com
volta.plus
fire-space.com
hostaletdelsindians.es
almamidwifery.com
tesisatonarim.com
kausette.com
brownswoodblog.com
bundan.com
adterium.com
dantreranch.com
myfbateam.com
breathebettertolivebetter.com
rino-gmbh.com
a-zpaperwork.eu
newonestop.com
cascinarosa33.it
nicksrock.com
nourella.com
autoteamlast.de
sachainchiuk.com
rapid5kloan.org
smartspeak.com
slotspinner.com
soncini.ch
schluesseldienste-hannover.de
mariajosediazdemera.com
envomask.com
cmascd.com
magnetvisual.com
oththukaruva.com
indiebizadvocates.org
jollity.hu
universelle.fr
studionumerik.fr
premiumweb.com.ua:443
fla.se
promus.ca
cainlaw-okc.com
jmmartinezilustrador.com
dayenne-styling.nl
grupoexin10.com
ketomealprep.academy
aidanpublishing.co.uk
epicjapanart.com
pokemonturkiye.com
turing.academy
awaitspain.com
iactechnologies.net
ronaldhendriks.nl
mieleshopping.it
tradenavigator.ch
vitoriaecoturismo.com.br
bratek-immobilien.de
hom-frisor.dk
die-immo-agentur.de
activeterroristwarningcompany.com
palmenhaus-erfurt.de
teamsegeln.ch
aktivfriskcenter.se
eos-horlogerie.com
alisodentalcare.com
catalyseurdetransformation.com
mondolandscapes.com
vedsegaard.dk
polynine.com
zinnystar.com
beauty-traveller.com
test-teleachat.fr
pinkxgayvideoawards.com
efficiencyconsulting.es
amyandzac.com
haus-landliebe.de
fluzfluzrewards.com
ncjc.ca
albcleaner.fr
rozmata.com
abulanov.com
lagschools.ng
akwaba-safaris.com
plbinsurance.com
dnqa.co.uk
justaroundthecornerpetsit.com
springfieldplumbermo.com
aheadloftladders.co.uk
allinonecampaign.com
tilldeeke.de
richardiv.com
ludoil.it
precisetemp.com
global-migrate.com
blucamp.com
cssp-mediation.org
pixelhealth.net
martha-frets-ceramics.nl
tellthebell.website
mensemetgesigte.co.za
supercarhire.co.uk
theater-lueneburg.de
broccolisoep.nl
jobstomoveamerica.org
sber-biznes.com
stringnosis.academy
the5thquestion.com
thehovecounsellingpractice.co.uk
artvark.nl
rolleepollee.com
annida.it
factoriareloj.com
kvetymichalovce.sk
wademurray.com
marcandy.com
baumfinancialservices.com
jimprattmediations.com
therapybusinessacademy.com
ced-elec.com
oportowebdesign.com
frankgoll.com
ya-elka.ru
khtrx.com
verbouwingsdouche.nl
istantidigitali.com
dibli.store
nrgvalue.com
masecologicos.com
xn--80addfr4ahr.dp.ua
midwestschool.org
girlish.ae
craftron.com
janasfokus.com
sbit.ag
opticahubertruiz.com
invela.dk
theatre-embellie.fr
testitjavertailut.net
pinthelook.com
endstarvation.com
mac-computer-support-hamburg.de
miscbo.it
edrickennedymacfoy.com
billyoart.com
jobkiwi.com.ng
auto-opel.ro
kelsigordon.com
bendel-partner.de
lookandseen.com
julielusktherapy.com
biblica.com
lassocrm.com
auberives-sur-vareze.fr
katherinealy.com
paradigmlandscape.com
publicompserver.de
antesacademy.it
stage-infirmier.fr
sunsolutions.es
neolaiamedispa.com
prodentalblue.com
gsconcretecoatings.com
bmw-i-pure-impulse.com
saint-malo-developpement.fr
thesilkroadny.com
monstarrsoccer.com
angelsmirrorus.com
boomerslivinglively.com
nevadaruralhousingstudies.org
banukumbak.com
o90.dk
kombi-dress.com
kryddersnapsen.dk
druktemakersheerenveen.nl
ziliak.com
mayprogulka.ru
livedeveloper.com
successcolony.com.ng
sppdstats.com
90nguyentuan.com
kuriero.pro
nutriwell.com.sg
prometeyagro.com.ua
kafkacare.com
airvapourbarrier.com
jeanmonti.com
stitch-n-bitch.com
wordpress.idium.no
lesyeuxbleus.net
metcalfe.ca
bertbutter.nl
arabianmice.com
agenceassemble.fr
sycamoregreenapts.com
patassociation.com
hotjapaneselesbian.com
mgimalta.com
saberconcrete.com
groovedealers.ru
awag-blog.de
geitoniatonaggelon.gr
karelinjames.com
furland.ru
skoczynski.eu
casinodepositors.com
avtoboss163.ru:443
kookooo.com
alattekniksipil.com
nginx.com
site.markkit.com.br
penumbuhrambutkeiskei.com
kompresory-opravy.com
kosten-vochtbestrijding.be
fanuli.com.au
mursall.de
sytzedevries.com
suonenjoen.fi
focuskontur.com
benchbiz.com
schlagbohrmaschinetests.com
perceptdecor.com
pro-gamer.pl
stanleyqualitysystems.com
bulyginnikitav.000webhostapp.com
yuanshenghotel.com
quitescorting.com
forumsittard.nl
rs-danmark.dk
expohomes.com
belofloripa.be
computer-place.de
carsten.sparen-it.de
drbrianhweeks.com
mindfuelers.com
pharmeko-group.com
webforsites.com
leadforensics.com
skyscanner.ro
dmlcpa.com
agencewho-aixenprovence.fr
sveneulberg.de
cc-experts.de
rossomattonecase.it
elitkeramika-shop.com.ua
p-ride.live
anleggsregisteret.no
parisschool.ru
k-zubki.ru
spectamarketingdigital.com.br
selected-minds.de
walterman.es
sweetz.fr
thegetawaycollective.com
ravage-webzine.nl
ocduiblog.com
schulz-moelln.de
fann.ru
primemarineengineering.com
atrgroup.it
mikegoodfellow.co.uk
tastevirginia.com
matthieupetel.fr
pankiss.ru
husetsanitas.dk
paprikapod.com
globalcompliancenews.com
hotelturbo.de
thenalpa.com
subquercy.fr
hekecrm.com
janmorgenstern.com
limounie.com
chainofhopeeurope.eu
renderbox.ch
ivancacu.com
crestgood.com
hospitalitytrainingsolutions.co.uk
scholarquotes.com
narca.net
ncn.nl
fskhjalmar.se
bjornvanvulpen.nl
texanscan.org
entdoctor-durban.com
greenrider.nl
toranjtuition.org
victorvictoria.com
fazagostar.co
witraz.pl
yourcosmicbeing.com
bg.szczecin.pl
malevannye.ru
skyboundnutrition.co.uk
altitudeboise.com
betterce.com
techybash.com
muller.nl
tweedekansenloket.nl
lunoluno.com
agrifarm.dk
deduktia.fi
lyricalduniya.com
babysitting-hk.helpergo.co
ilveshistoria.com
alpesiberie.com
acornishstudio.co.uk
delegationhub.com
bumbipdeco.site
rubyaudiology.com
inewsstar.com
eastgrinsteadwingchun.com
b3b.ch
goodherbalhealth.com
sealgrinderpt.com
bavovrienden.nl
evsynthacademy.org
metriplica.academy
aciscomputers.com
akcadagofis.com
baptistdistinctives.org
buonabitare.com
kristianboennelykke.dk
jax-interim-and-projectmanagement.com
wallflowersandrakes.com
bookingwheel.com
ingresosextras.online
housesofwa.com
fbmagazine.ru
boyfriendsgoal.site
leansupremegarcinia.net
simpleitsolutions.ch
elex.is
patriotcleaning.net
endlessrealms.net
humanviruses.org
oro.ae
flossmoordental.com
oncarrot.com
spirello.nl
skinkeeper.li
bellesiniacademy.org
profiz.com
imaginekithomes.co.nz
muni.pe
redctei.co
iexpert99.com
encounter-p.net
duthler.nl
trainiumacademy.com
randyabrown.com
levelseven.be
ijsselbeton.nl
drbenveniste.com
schroederschoembs.com
wyreforest.net
line-x.co.uk
ronielyn.com
perfectgrin.com
gbk-tp1.de
metroton.ru
skidpiping.de
medicalsupportco.com
bubbalucious.com
dinecorp.com
ebible.co
advance-refle.com
nepressurecleaning.com
eafx.pro
concontactodirecto.com
olry-cloisons.fr
k-v-f.de
catering.com
glas-kuck.de
rarefoods.ro
krishnabrawijaya.com
letsstopsmoking.co.uk
lumturo.academy
brinkdoepke.eu
aceroprime.com
ultimatelifesource.com
tchernia-conseil.fr
goddardleadership.org
alabamaroofingllc.com
shortsalemap.com
gardenpartner.pl
arearugcleaningnyc.com
loparnille.se
maxcube24.com.ua
jandhpest.com
hameghlim.com
topvijesti.net
werkzeugtrolley.net
trevi-vl.ru
dennisverschuur.com
wasnederland.nl
gaearoyals.com
teethinadaydentalimplants.com
ntinasfiloxenia.gr
keyboardjournal.com
eksperdanismanlik.com
mangimirossana.it
suitesartemis.gr
xtensifi.com
nbva.co.uk
stabilisateur.fr
angeleyezstripclub.com
augen-praxisklinik-rostock.de
terraflair.de
oscommunity.de
vvego.com
deziplan.ru
rizplakatjaya.com
logosindustries.com
mind2muscle.nl
bescomedical.de
solutionshosting.co.uk
birthplacemag.com
irizar.com
insane.agency
avisioninthedesert.com
tieronechic.com
frameshift.it
rvside.com
beandrivingschool.com.au
forskolinslimeffect.net
pedmanson.com
osn.ro
professionetata.com
brannbornfastigheter.se
leatherjees.com
netadultere.fr
loysonbryan.com
awaisghauri.com
craftingalegacy.com
berdonllp.com
cap29010.it
motocrosshideout.com
kenmccallum.com
axisoflove.org:443
datatri.be
putzen-reinigen.com
internalresults.com
kryptos72.com
hnkns.com
mariamalmahdi.com
skooppi.fi
silkeight.com
nationnewsroom.com
jameswilliamspainting.com
palmecophilippines.com
taulunkartano.fi
zorgboerderijravensbosch.nl
lidkopingsnytt.nu
amelielecompte.wordpress.com
onesynergyinternational.com
apogeeconseils.fr
forextimes.ru
n-newmedia.de
hiddensee-buhne11.de
richardmaybury.co.uk
bodet150ans.com
louiedager.com
makingmillionaires.net
tzn.nu
chatberlin.de
liverpoolabudhabi.ae
singletonfinancial.com
sshomme.com
framemyballs.com
jobscore.com
easydental.ae
galaniuklaw.com
cymru.futbol
bd2fly.com
g2mediainc.com
rechtenplicht.be
espaciopolitica.com
asiaartgallery.jp
log-barn.co.uk
onlinemarketingsurgery.co.uk
transifer.fr
mbuildinghomes.com
aoyama.ac
harleystreetspineclinic.com
tbalp.co.uk
daveystownhouse.com
zuerich-umzug.ch
aquacheck.co.za
xn--80abehgab4ak0ddz.xn--p1ai
atma.nl
2020hindsight.info
mediahub.co.nz
grancanariaregional.com
cyberpromote.de
bluemarinefoundation.com
limmortelyouth.com
aslog.fr
imagine-entertainment.com
jaaphoekzema.nl
jlwilsonbooks.com
vapiano.fr
bluelakevision.com
dentourage.com
natturestaurante.com.br
fysiotherapierijnmond.nl
lashandbrowenvy.com
maryairbnb.wordpress.com
hostastay.com
bychowo.pl
zealcon.ae
smartercashsystem.com
the-cupboard.co.uk
rhino-storage.co.uk
mrmac.com
liepertgrafikweb.at
c-sprop.com
andreaskildegaard.dk
speakaudible.com
stathmoulis.gr
billscars.net
kickittickets.com
salonlamar.nl
angelika-schwarz.com
fascaonline.com
martinipstudios.com
jonnyhooley.com
rentsportsequip.com
achetrabalhos.com
adabible.org
cuadc.org
eurethicsport.eu
kartuindonesia.com
levencovka.ru
bluetenreich-brilon.de
clemenfoto.dk
chris-anne.com
legundschiess.de
motocrossplace.co.uk
davedavisphotos.com
catchup-mag.com
3daywebs.com
radishallgood.com
relevantonline.eu
buzzneakers.com
letterscan.de
drvoip.com
hawaiisteelbuilding.com
lovcase.com
finsahome.co.uk
startuplive.org
advanced-removals.co.uk
ayudaespiritualtamara.com
satoblog.org
luvbec.com
tatyanakopieva.ru
carolynfriedlander.com
creohn.de
interlinkone.com
silverbird.dk
hypogenforensic.com
thestudio.academy
lollachiro.com
piestar.com
parentsandkids.com
leloupblanc.gr
scietech.academy
mneti.ru
andrealuchesi.it
block-optic.com
mediogiro.com.ar
barbaramcfadyenjewelry.com
oexebusiness.com
corporacionrr.com
collegetennis.info
optigas.com
paardcentraal.nl
littlesaints.academy
pilotgreen.com
johnkoen.com
triplettagaite.fr
orchardbrickwork.com
so-sage.fr
latteswithleslie.com
citydogslife.com
fta-media.com
azloans.com
galatee-couture.com
comoserescritor.com
rentingwell.com
funworx.de
hutchstyle.co.uk
powershell.su
gurutechnologies.net
futurenetworking.com
bcmets.info
koncept-m.ru
banksrl.co.za
laaisterplakky.nl
thepixelfairy.com
t3brothers.com
reputation-medical.online
baikalflot.ru
cleanroomequipment.ie
bilius.dk
buerocenter-butzbach-werbemittel.de
hoteltantra.com
eshop.design
photographycreativity.co.uk
leopoldineroux.com
drnelsonpediatrics.com
alwaysdc.com
bonitabeachassociation.com
worldproskitour.com
ox-home.com
devplus.be
mediabolmong.com
buffdaddyblog.com
pubcon.com
fotoeditores.com
happylublog.wordpress.com
watchsale.biz
memphishealthandwellness.com
uci-france.fr
digitale-elite.de
nvisionsigns.com
docarefoundation.org
hawthornsretirement.co.uk
acibademmobil.com.tr
xn--ziinoapte-6ld.ro
skolaprome.eu
peninggibadan.co.id
bagaholics.in
nykfdyrehospital.dk
bajova.sk
electricianul.com
brighthillgroup.com
scotlandsroute66.co.uk
thiagoperez.com
boloria.de
rtc24.com
carmel-york.com
xn--billigafrgpatroner-stb.se
hvitfeldt.dk
golfclublandgoednieuwkerk.nl
dentalcircle.com
malzomattalar.com
kerstliedjeszingen.nl
projektparkiet.pl
centuryvisionglobal.com
oraweb.net
rhino-turf.com
fixx-repair.com
vitormmcosta.com
jalkapuu.net
solidhosting.nl
edvestors.org
peppergreenfarmcatering.com.au
amorbellezaysalud.com
affligemsehondenschool.be
curtsdiscountguns.com
charlottelhanna.com
wrinstitute.org
jlgraphisme.fr
fidelitytitleoregon.com
karmeliterviertel.com
kdbrh.com
smartmind.net
mesajjongeren.nl
scentedlair.com
cmeow.com
zaczytana.com
wirmuessenreden.com
nepal-pictures.com
lovetzuchia.com
modamarfil.com
leijstrom.com
alexwenzel.de
graygreenbiomedservices.com
wribrazil.com
aberdeenartwalk.org
ikzoekgod.be
jefersonalessandro.com
claudiakilian.de
astrographic.com
andermattswisswatches.ch
naukaip.ru
holocine.de
mercadodelrio.com
donau-guides.eu
yvesdoin-aquarelles.fr
greatofficespaces.net
mahikuchen.com
manzel.tn
cotton-avenue.co.il
floweringsun.org
whoopingcrane.com
christopherhannan.com
yayasanprimaunggul.org
innersurrection.com
nxtstg.org
designimage.ae
pureelements.nl
denverwynkoopdentist.com
cardsandloyalty.com
ledyoucan.com
apmollerpension.com
airserviceunlimited.com
dr-vita.de
magrinya.net
rattanwarehouse.co.uk
der-stempelking.de
foerderverein-vatterschule.de
alharsunindo.com
biketruck.de
billigeflybilletter.dk
secrets-clubs.co.uk
slotenmakerszwijndrecht.nl
dierenambulancealkmaar.nl
smartworkplaza.com
direitapernambuco.com
distrifresh.com
azerbaycanas.com
livelai.com
ygallerysalonsoho.com:443
topautoinsurers.net
kiraribeaute-nani.com
soundseeing.net
fi-institutionalfunds.com
renehartman.nl
advesa.com
11.in.ua
kamin-somnium.de
reizenmetkinderen.be
circlecitydj.com
mollymccarthydesign.com
epsondriversforwindows.com
premier-iowa.com
artcase.pl
nieuwsindeklas.be
tecleados.com
ilovefullcircle.com
condormobile.fr
thisprettyhair.com
directique.com
geoweb.software
etgdogz.de
charlesfrancis.photos
ikadomus.com
mjk.digital
bodymindchallenger.com
moira-cristescu.com
mrkluttz.com
egpu.fr
johnstonmingmanning.com
parksideseniorliving.net
four-ways.com
jdscenter.com
vipcarrental.ae
grafikstudio-visuell.de
web865.com
agriturismocastagneto.it
domaine-des-pothiers.com
gosouldeep.com
ahgarage.com
yourhappyevents.fr
otpusk.zp.ua
handyman-silkeborg.dk
hensleymarketing.com
subyard.com
craftstone.co.nz
cesep2019.com
napisat-pismo-gubernatoru.ru:443
welovecustomers.fr
opt4cdi.com
rishigangoly.com
enactusnhlstenden.com
shortysspices.com
uncensoredhentaigif.com
pxsrl.it
gazelle-du-web.com
dcc-eu.com
jayfurnitureco.com
molade.nl
brunoimmobilier.com
lisa-poncon.fr
5thactors.com
alltagsrassismus-entknoten.de
alnectus.com
fsbforsale.com
bcabattoirs.org
iron-mine.ru
sellthewrightway.com
jacquesgarcianoto.com
coachpreneuracademy.com
pvandambv.nl
stoneridgemontessori.com
kellengatton.com
agora-collectivites.com
agendatwentytwenty.com
dreamvoiceclub.org
towelroot.co
hostingbangladesh.net
arthakapitalforvaltning.dk
nauticmarine.dk
greeneyetattoo.com
domilivefurniture.com
look.academy
ownidentity.com
pisofare.co
annenymus.com
lattalvor.com
nalliasmali.net
nuohous.com
pajagus.fr
jglconsultancy.com
burg-zelem.de
qandmmusiccenter.com
bayshoreelite.com
lgiwines.com
sharonalbrightdds.com
gatlinburgcottage.com
afbudsrejserallinclusive.dk
ciga-france.fr
heuvelland-oaze.nl
yournextshoes.com
alene.co
gavelmasters.com
csaballoons.com
gta-jjb.fr
stralsund-ansichten.de
slideevents.be
santastoy.store
marmarabasin.com
5pointpt.com
guohedd.com
morgansconsult.com
apiarista.de
smarttourism.academy
adaduga.info
weddingceremonieswithtim.com
goodboyscustom.com
cac2040.com
acb-gruppe.ch
theboardroomafrica.com
spacebel.be
traitware.com
matteoruzzaofficial.com
cl0nazepamblog.com
poems-for-the-soul.ch
onlinetvgroup.com
brisbaneosteopathic.com.au
-
net
true
-
pid
33
-
prc
sqlagent.exe
sqbcoreservice.exe
mysqld_opt.exe
synctime.exe
excel.exe
thebat64.exe
onenote.exe
tbirdconfig.exe
powerpnt.exe
xfssvccon.exe
oracle.exe
infopath.exe
mydesktopqos.exe
dbsnmp.exe
sqlbrowser.exe
mysqld.exe
sqlservr.exe
wordpad.exe
thebat.exe
agntsvc.exe
thunderbird.exe
encsvc.exe
ocomm.exe
winword.exe
msaccess.exe
dbeng50.exe
firefoxconfig.exe
isqlplussvc.exe
ocssd.exe
visio.exe
mydesktopservice.exe
sqlwriter.exe
ocautoupds.exe
mysqld_nt.exe
msftesql.exe
mspub.exe
outlook.exe
steam.exe
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on you computer has expansion {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
331
Extracted
C:\u7n5gh-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/ABE12F67F4420E1C
http://decryptor.top/ABE12F67F4420E1C
Targets
-
-
Target
861bc212241bcac9f8095c8de1b180.bin
-
Size
161KB
-
MD5
e6566f78abf3075ebea6fd037803e176
-
SHA1
de960051530de0ec06b72b8e3e1cb558e09a1c77
-
SHA256
861bc212241bcac9f8095c8de1b180b398057cbb2d37c9220086ffaf24ba9e08
-
SHA512
8c648916151d7515899b142a982ba530881245a709bf146861f0d4b1e460fc9bd6ff4df40f8fe29533c3f01c9df25cc5333f9a1a8159d7db70e80fc269fea2e8
Score10/10-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
suricata: ET MALWARE Self-Signed Cert Observed in Various Zbot Strains
suricata: ET MALWARE Self-Signed Cert Observed in Various Zbot Strains
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-