Static task
static1
Behavioral task
behavioral1
Sample
MCSP89.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
MCSP89.exe
Resource
win10v2004-20230220-en
General
-
Target
MCSP89.bin.zip
-
Size
129KB
-
MD5
4e58e45102ea01bf5ca9a26b76fff435
-
SHA1
75cbee253fc38ac9070771cecb25088519213af0
-
SHA256
d30071868743ddc8278f20304a064d9f11d8fa1777872fa2e1d5dd7257b28a28
-
SHA512
aaf00e786e1c41bb60a1126dbdb163bc9b8f55995899a60f049734c0ab4fd7857ae153540ed5a9eb06ba38bcac5ff9deca9bebe30228ba05f607d033b9d202ee
-
SSDEEP
1536:o3N6Q40R+FTBVjc2C65SCi69dBJhOplww+9uN446BjB6/0NOSK7t3EgGNbQhngKP:0B40Pt65Ni0BzO8u1qjIwda6KSaUB3RY
Malware Config
Extracted
sodinokibi
$2a$10$Z.vLBbuByA3OGI00qFABDOx2/NqAOqewqa5Z/mCqYgmLwij8Ehm7.
3358
petnest.ir
mmgdouai.fr
sporthamper.com
8449nohate.org
panelsandwichmadrid.es
winrace.no
tradiematepro.com.au
stemplusacademy.com
woodworkersolution.com
danholzmann.com
psa-sec.de
freie-gewerkschaften.de
stoeferlehalle.de
walter-lemm.de
groupe-cets.com
finde-deine-marke.de
baumkuchenexpo.jp
aarvorg.com
promesapuertorico.com
instatron.net
blgr.be
rehabilitationcentersinhouston.net
icpcnj.org
nokesvilledentistry.com
girlillamarketing.com
offroadbeasts.com
mbxvii.com
corelifenutrition.com
arteservicefabbro.com
imadarchid.com
gasolspecialisten.se
microcirc.net
asgestion.com
ussmontanacommittee.us
stampagrafica.es
henricekupper.com
xn--thucmctc-13a1357egba.com
pickanose.com
peterstrobos.com
vdberg-autoimport.nl
pixelarttees.com
caffeinternet.it
epwritescom.wordpress.com
zimmerei-fl.de
tetinfo.in
ymca-cw.org.uk
goodgirlrecovery.com
alfa-stroy72.com
micahkoleoso.de
iwelt.de
bingonearme.org
cheminpsy.fr
ogdenvision.com
liliesandbeauties.org
pelorus.group
spsshomeworkhelp.com
theshungiteexperience.com.au
dlc.berlin
maxadams.london
broseller.com
commonground-stories.com
cityorchardhtx.com
deltacleta.cat
nativeformulas.com
ledmes.ru
kissit.ca
destinationclients.fr
evergreen-fishing.com
kosterra.com
mikeramirezcpa.com
besttechie.com
pointos.com
insigniapmg.com
thefixhut.com
jorgobe.at
pv-design.de
pmc-services.de
mrtour.site
fairfriends18.de
journeybacktolife.com
thedad.com
mylovelybluesky.com
mooreslawngarden.com
odiclinic.org
filmvideoweb.com
christinarebuffetcourses.com
insp.bi
parking.netgateway.eu
parkstreetauto.net
rafaut.com
osterberg.fi
tanzschule-kieber.de
blog.solutionsarchitect.guru
blumenhof-wegleitner.at
aco-media.nl
shiresresidential.com
mardenherefordshire-pc.gov.uk
veybachcenter.de
precisionbevel.com
spylista.com
alvinschwartz.wordpress.com
praxis-management-plus.de
bee4win.com
fiscalsort.com
fibrofolliculoma.info
projetlyonturin.fr
charlottepoudroux-photographie.fr
chatizel-paysage.fr
tulsawaterheaterinstallation.com
simpkinsedwards.co.uk
edrcreditservices.nl
div-vertriebsforschung.de
nurturingwisdom.com
em-gmbh.ch
y-archive.com
wolf-glas-und-kunst.de
satyayoga.de
mapawood.com
higadograsoweb.com
saarland-thermen-resort.com
mrsfieldskc.com
id-et-d.fr
deschl.net
ikads.org
gamesboard.info
linnankellari.fi
huissier-creteil.com
poultrypartners.nl
bockamp.com
baylegacy.com
huehnerauge-entfernen.de
simoneblum.de
triggi.de
freie-baugutachterpraxis.de
systemate.dk
hihaho.com
sportverein-tambach.de
paymybill.guru
chefdays.de
renergysolution.com
i-trust.dk
sloverse.com
crediacces.com
ralister.co.uk
kaliber.co.jp
littlebird.salon
sportsmassoren.com
seproc.hn
pivoineetc.fr
cnoia.org
atmos-show.com
analiticapublica.es
sipstroysochi.ru
ampisolabergeggi.it
darrenkeslerministries.com
dushka.ua
mylolis.com
hannah-fink.de
blewback.com
simplyblessedbykeepingitreal.com
faizanullah.com
eaglemeetstiger.de
unim.su
crosspointefellowship.church
modelmaking.nl
uimaan.fi
jameskibbie.com
oneheartwarriors.at
happyeasterimages.org
importardechina.info
jasonbaileystudio.com
zervicethai.co.th
alysonhoward.com
hardinggroup.com
austinlchurch.com
aunexis.ch
antenanavi.com
truenyc.co
sotsioloogia.ee
labobit.it
thomasvicino.com
pasvenska.se
luckypatcher-apkz.com
celularity.com
idemblogs.com
gporf.fr
chrissieperry.com
gratispresent.se
fizzl.ru
waywithwords.net
judithjansen.com
the-domain-trader.com
smessier.com
stacyloeb.com
knowledgemuseumbd.com
manutouchmassage.com
hellohope.com
ilso.net
schoellhammer.com
beaconhealthsystem.org
pogypneu.sk
handi-jack-llc.com
kirkepartner.dk
tomoiyuma.com
andersongilmour.co.uk
krlosdavid.com
creamery201.com
polymedia.dk
101gowrie.com
readberserk.com
modamilyon.com
hrabritelefon.hr
chandlerpd.com
edgewoodestates.org
forestlakeuca.org.au
gasbarre.com
catholicmusicfest.com
woodleyacademy.org
tongdaifpthaiphong.net
irinaverwer.com
lillegrandpalais.com
tarotdeseidel.com
planchaavapor.net
jvanvlietdichter.nl
nuzech.com
macabaneaupaysflechois.com
kunze-immobilien.de
liveottelut.com
financescorecard.com
pmcimpact.com
herbayupro.com
hushavefritid.dk
urmasiimariiuniri.ro
consultaractadenacimiento.com
limassoldriving.com
deepsouthclothingcompany.com
imperfectstore.com
eadsmurraypugh.com
abitur-undwieweiter.de
controldekk.com
sterlingessay.com
danskretursystem.dk
carolinepenn.com
oncarrot.com
d1franchise.com
fitnessbazaar.com
promalaga.es
physiofischer.de
leoben.at
lmtprovisions.com
lbcframingelectrical.com
maasreusel.nl
withahmed.com
polzine.net
mrxermon.de
americafirstcommittee.org
manifestinglab.com
noskierrenteria.com
mirkoreisser.de
anthonystreetrimming.com
waermetauscher-berechnen.de
vancouver-print.ca
smogathon.com
insidegarage.pl
classycurtainsltd.co.uk
jiloc.com
streamerzradio1.site
longislandelderlaw.com
hmsdanmark.dk
selfoutlet.com
ecopro-kanto.com
hotelsolbh.com.br
hokagestore.com
xn--vrftet-pua.biz
mooshine.com
theletter.company
crowd-patch.co.uk
mymoneyforex.com
naturalrapids.com
plastidip.com.ar
rebeccarisher.com
stopilhan.com
lightair.com
ceid.info.tr
dekkinngay.com
bodyforwife.com
familypark40.com
diversiapsicologia.es
newstap.com.ng
cuspdental.com
oneplusresource.org
dr-seleznev.com
vannesteconstruct.be
milltimber.aberdeen.sch.uk
sabel-bf.com
harpershologram.wordpress.com
live-your-life.jp
iviaggisonciliegie.it
bptdmaluku.com
transliminaltribe.wordpress.com
associationanalytics.com
haremnick.com
tips.technology
foretprivee.ca
syndikat-asphaltfieber.de
foryourhealth.live
gopackapp.com
mepavex.nl
boldcitydowntown.com
sandd.nl
ccpbroadband.com
maineemploymentlawyerblog.com
restaurantesszimmer.de
acomprarseguidores.com
quemargrasa.net
nataschawessels.com
adoptioperheet.fi
amerikansktgodis.se
daniel-akermann-architektur-und-planung.ch
digi-talents.com
psc.de
slimidealherbal.com
marcuswhitten.site
body-armour.online
falcou.fr
markelbroch.com
erstatningsadvokaterne.dk
asteriag.com
expandet.dk
dr-pipi.de
rksbusiness.com
heliomotion.com
pier40forall.org
themadbotter.com
femxarxa.cat
sairaku.net
makeflowers.ru
bargningavesta.se
lapinvihreat.fi
mezhdu-delom.ru
lloydconstruction.com
fax-payday-loans.com
merzi.info
slimani.net
jakekozmor.com
ausair.com.au
kingfamily.construction
vox-surveys.com
argenblogs.com.ar
euro-trend.pl
carrybrands.nl
stormwall.se
grelot-home.com
anybookreader.de
campusoutreach.org
leather-factory.co.jp
xoabigail.com
filmstreamingvfcomplet.be
hotelzentral.at
glennroberts.co.nz
devstyle.org
beautychance.se
rerekatu.com
rhinosfootballacademy.com
smartypractice.com
noesis.tech
body-guards.it
parkcf.nl
cyntox.com
compliancesolutionsstrategies.com
allentownpapershow.com
starsarecircular.org
michaelsmeriglioracing.com
pomodori-pizzeria.de
blogdecachorros.com
alsace-first.com
anteniti.com
echtveilig.nl
zzyjtsgls.com
lascuola.nl
simulatebrain.com
artige.com
employeesurveys.com
bloggyboulga.net
abuelos.com
international-sound-awards.com
abogadosaccidentetraficosevilla.es
digivod.de
farhaani.com
yassir.pro
dinslips.se
c2e-poitiers.com
wmiadmin.com
izzi360.com
mirjamholleman.nl
enovos.de
fundaciongregal.org
vorotauu.ru
shsthepapercut.com
symphonyenvironmental.com
ohidesign.com
karacaoglu.nl
tux-espacios.com
vetapharma.fr
musictreehouse.net
easytrans.com.au
vibehouse.rw
spinheal.ru
jyzdesign.com
plv.media
siluet-decor.ru
4youbeautysalon.com
colorofhorses.com
strandcampingdoonbeg.com
evangelische-pfarrgemeinde-tuniberg.de
smejump.co.th
zewatchers.com
hoteledenpadova.it
educar.org
ausbeverage.com.au
burkert-ideenreich.de
dr-tremel-rednitzhembach.de
bodyfulls.com
basisschooldezonnewijzer.nl
paulisdogshop.de
lescomtesdemean.be
werkkring.nl
igrealestate.com
joseconstela.com
smokeysstoves.com
coding-machine.com
psnacademy.in
birnam-wood.com
vibethink.net
igfap.com
interactcenter.org
zieglerbrothers.de
tecnojobsnet.com
toponlinecasinosuk.co.uk
theapifactory.com
first-2-aid-u.com
balticdentists.com
vitalyscenter.es
onlybacklink.com
lynsayshepherd.co.uk
shiftinspiration.com
friendsandbrgrs.com
klimt2012.info
pferdebiester.de
globedivers.wordpress.com
tenacitytenfold.com
balticdermatology.lt
tandartspraktijkhartjegroningen.nl
slupetzky.at
irishmachineryauctions.com
marchand-sloboda.com
ino-professional.ru
puertamatic.es
cortec-neuro.com
theduke.de
advokathuset.dk
ivivo.es
biortaggivaldelsa.com
prochain-voyage.net
asiluxury.com
autodujos.lt
spd-ehningen.de
mariposapropaneaz.com
assurancesalextrespaille.fr
gmto.fr
smalltownideamill.wordpress.com
ecoledansemulhouse.fr
geisterradler.de
lachofikschiet.nl
myhostcloud.com
houseofplus.com
pawsuppetlovers.com
cite4me.org
lukeshepley.wordpress.com
makeitcount.at
quickyfunds.com
levdittliv.se
otto-bollmann.de
bbsmobler.se
cranleighscoutgroup.org
bridgeloanslenders.com
heurigen-bauer.at
2ekeus.nl
sw1m.ru
lionware.de
maryloutaylor.com
bimnapratica.com
lecantou-coworking.com
slwgs.org
zso-mannheim.de
simpliza.com
christ-michael.net
devlaur.com
opatrovanie-ako.sk
ladelirante.fr
esope-formation.fr
xn--singlebrsen-vergleich-nec.com
dutchbrewingcoffee.com
ruralarcoiris.com
fatfreezingmachines.com
lubetkinmediacompanies.com
refluxreducer.com
pcp-nc.com
bunburyfreightservices.com.au
live-con-arte.de
polychromelabs.com
miraclediet.fun
vyhino-zhulebino-24.ru
binder-buerotechnik.at
nicoleaeschbachorg.wordpress.com
vietlawconsultancy.com
maratonaclubedeportugal.com
raschlosser.de
geoffreymeuli.com
work2live.de
stallbyggen.se
wien-mitte.co.at
videomarketing.pro
urist-bogatyr.ru
tuuliautio.fi
cerebralforce.net
humancondition.com
samnewbyjax.com
naturavetal.hr
launchhubl.com
citymax-cr.com
charlesreger.com
wellplast.se
southeasternacademyofprosthodontics.org
coursio.com
exenberger.at
bookspeopleplaces.com
tophumanservicescourses.com
backstreetpub.com
naturstein-hotte.de
miriamgrimm.de
sobreholanda.com
argos.wityu.fund
marietteaernoudts.nl
agence-chocolat-noir.com
paradicepacks.com
montrium.com
bayoga.co.uk
evologic-technologies.com
aprepol.com
dsl-ip.de
cactusthebrand.com
bestbet.com
pocket-opera.de
sla-paris.com
hexcreatives.co
memaag.com
resortmtn.com
mdacares.com
pubweb.carnet.hr
torgbodenbollnas.se
ctrler.cn
rollingrockcolumbia.com
patrickfoundation.net
campus2day.de
cafemattmeera.com
jobmap.at
biapi-coaching.fr
lucidinvestbank.com
twohourswithlena.wordpress.com
ventti.com.ar
penco.ie
associacioesportivapolitg.cat
oceanastudios.com
huesges-gruppe.de
sojamindbody.com
gymnasedumanagement.com
travelffeine.com
brigitte-erler.com
blacksirius.de
operaslovakia.sk
degroenetunnel.com
corona-handles.com
havecamerawilltravel2017.wordpress.com
boisehosting.net
spacecitysisters.org
iqbalscientific.com
bastutunnan.se
celeclub.org
socstrp.org
iphoneszervizbudapest.hu
antiaginghealthbenefits.com
comarenterprises.com
wari.com.pe
fitovitaforum.com
minipara.com
1team.es
people-biz.com
gantungankunciakrilikbandung.com
sanyue119.com
dareckleyministries.com
ncuccr.org
imaginado.de
mindpackstudios.com
luxurytv.jp
platformier.com
skanah.com
radaradvies.nl
milanonotai.it
rumahminangberdaya.com
tanciu.com
purposeadvisorsolutions.com
airconditioning-waalwijk.nl
bigasgrup.com
justinvieira.com
jusibe.com
lefumetdesdombes.com
bouncingbonanza.com
clos-galant.com
kath-kirche-gera.de
scenepublique.net
kenhnoithatgo.com
zflas.com
urclan.net
aselbermachen.com
smhydro.com.pl
wsoil.com.sg
autofolierung-lu.de
sportiomsportfondsen.nl
coastalbridgeadvisors.com
sachnendoc.com
nestor-swiss.ch
katketytaanet.fi
whyinterestingly.ru
mbfagency.com
aglend.com.au
kevinjodea.com
vickiegrayimages.com
greenpark.ch
nandistribution.nl
vloeren-nu.nl
solhaug.tk
leeuwardenstudentcity.nl
ahouseforlease.com
midmohandyman.com
coding-marking.com
apolomarcas.com
copystar.co.uk
corola.es
forskolorna.org
autodemontagenijmegen.nl
hairnetty.wordpress.com
milestoneshows.com
jenniferandersonwriter.com
elimchan.com
seevilla-dr-sturm.at
mank.de
visiativ-industry.fr
deprobatehelp.com
delawarecorporatelaw.com
mastertechengineering.com
spectrmash.ru
healthyyworkout.com
galleryartfair.com
blossombeyond50.com
myzk.site
micro-automation.de
4net.guru
bradynursery.com
effortlesspromo.com
itelagen.com
boompinoy.com
collaborativeclassroom.org
qlog.de
rostoncastings.co.uk
verytycs.com
xn--logopdie-leverkusen-kwb.de
theclubms.com
caribbeansunpoker.com
bafuncs.org
bundabergeyeclinic.com.au
fotoscondron.com
autopfand24.de
podsosnami.ru
ecpmedia.vn
bigbaguettes.eu
thee.network
ftlc.es
abl1.net
teresianmedia.org
toreria.es
presseclub-magdeburg.de
neuschelectrical.co.za
dontpassthepepper.com
ianaswanson.com
verbisonline.com
personalenhancementcenter.com
jeanlouissibomana.com
ra-staudte.de
qualitaetstag.de
botanicinnovations.com
rieed.de
lange.host
adultgamezone.com
www1.proresult.no
profectis.de
revezlimage.com
bigler-hrconsulting.ch
plotlinecreative.com
the-virtualizer.com
nacktfalter.de
trystana.com
richard-felix.co.uk
leda-ukraine.com.ua
heidelbergartstudio.gallery
tinkoff-mobayl.ru
dubnew.com
deoudedorpskernnoordwijk.nl
denifl-consulting.at
fayrecreations.com
candyhouseusa.com
run4study.com
web.ion.ag
answerstest.ru
greenko.pl
chavesdoareeiro.com
tigsltd.com
kalkulator-oszczednosci.pl
apprendrelaudit.com
spargel-kochen.de
mir-na-iznanku.com
myteamgenius.com
koko-nora.dk
nosuchthingasgovernment.com
fannmedias.com
aodaichandung.com
mooglee.com
officehymy.com
securityfmm.com
nsec.se
innote.fi
xn--fnsterputssollentuna-39b.se
cwsitservices.co.uk
webmaster-peloton.com
faroairporttransfers.net
walkingdeadnj.com
jacquin-maquettes.com
mytechnoway.com
triactis.com
theadventureedge.com
uranus.nl
saxtec.com
ncid.bc.ca
iyahayki.nl
seminoc.com
rota-installations.co.uk
nachhilfe-unterricht.com
galserwis.pl
grupocarvalhoerodrigues.com.br
edelman.jp
camsadviser.com
retroearthstudio.com
accountancywijchen.nl
worldhealthbasicinfo.com
pcprofessor.com
piajeppesen.dk
jolly-events.com
groupe-frayssinet.fr
castillobalduz.es
tanzprojekt.com
kostenlose-webcams.com
ulyssemarketing.com
takeflat.com
pay4essays.net
csgospeltips.se
rimborsobancario.net
tastewilliamsburg.com
xtptrack.com
kindersitze-vergleich.de
real-estate-experts.com
lebellevue.fr
finediningweek.pl
ungsvenskarna.se
mediaplayertest.net
stingraybeach.com
321play.com.hk
wasmachtmeinfonds.at
flexicloud.hk
cuppacap.com
ilive.lt
devok.info
embracinghiscall.com
brawnmediany.com
craigvalentineacademy.com
dutchcoder.nl
jobcenterkenya.com
gastsicht.de
calabasasdigest.com
aniblinova.wordpress.com
oldschoolfun.net
hatech.io
meusharklinithome.wordpress.com
iwr.nl
no-plans.com
outcomeisincome.com
rosavalamedahr.com
mountsoul.de
nvwoodwerks.com
shadebarandgrillorlando.com
id-vet.com
testzandbakmetmening.online
babcockchurch.org
stoneys.ch
stefanpasch.me
firstpaymentservices.com
boulderwelt-muenchen-west.de
schmalhorst.de
cirugiauretra.es
yousay.site
antonmack.de
thomas-hospital.de
seagatesthreecharters.com
gemeentehetkompas.nl
gaiam.nl
baronloan.org
bargningharnosand.se
35-40konkatsu.net
manijaipur.com
teczowadolina.bytom.pl
kampotpepper.gives
plantag.de
kamahouse.net
hvccfloorcare.com
bristolaeroclub.co.uk
trapiantofue.it
htchorst.nl
ftf.or.at
victoriousfestival.co.uk
rozemondcoaching.nl
bildungsunderlebnis.haus
loprus.pl
tennisclubetten.nl
wychowanieprzedszkolne.pl
cursoporcelanatoliquido.online
sauschneider.info
ivfminiua.com
kamienny-dywan24.pl
appsformacpc.com
hhcourier.com
maureenbreezedancetheater.org
alhashem.net
marketingsulweb.com
abogados-en-alicante.es
conexa4papers.trade
thedresserie.com
hkr-reise.de
sevenadvertising.com
sofavietxinh.com
better.town
noixdecocom.fr
agence-referencement-naturel-geneve.net
brevitempore.net
dirittosanitario.biz
centromarysalud.com
architekturbuero-wagner.net
smithmediastrategies.com
calxplus.eu
i-arslan.de
allamatberedare.se
tsklogistik.eu
saka.gr
kadesignandbuild.co.uk
tstaffing.nl
aminaboutique247.com
strategicstatements.com
trackyourconstruction.com
stupbratt.no
drinkseed.com
alten-mebel63.ru
commercialboatbuilding.com
mrsplans.net
yamalevents.com
gadgetedges.com
kisplanning.com.au
malychanieruchomoscipremium.com
homng.net
bogdanpeptine.ro
x-ray.ca
muamuadolls.com
serce.info.pl
liikelataamo.fi
licor43.de
trulynolen.co.uk
DupontSellsHomes.com
courteney-cox.net
narcert.com
ouryoungminds.wordpress.com
songunceliptv.com
buroludo.nl
beyondmarcomdotcom.wordpress.com
thaysa.com
creative-waves.co.uk
logopaedie-blomberg.de
tandartspraktijkheesch.nl
homecomingstudio.com
12starhd.online
westdeptfordbuyrite.com
sarbatkhalsafoundation.org
kikedeoliveira.com
funjose.org.gt
madinblack.com
extensionmaison.info
lapmangfpt.info.vn
siliconbeach-realestate.com
sweering.fr
dubscollective.com
makeurvoiceheard.com
pasivect.co.uk
ligiercenter-sachsen.de
lykkeliv.net
portoesdofarrobo.com
hairstylesnow.site
kao.at
greenfieldoptimaldentalcare.com
talentwunder.com
bierensgebakkramen.nl
xltyu.com
vermoote.de
socialonemedia.com
ilcdover.com
eglectonk.online
morawe-krueger.de
lorenacarnero.com
bhwlawfirm.com
levihotelspa.fi
gonzalezfornes.es
jadwalbolanet.info
notmissingout.com
mountaintoptinyhomes.com
123vrachi.ru
koken-voor-baby.nl
d2marketing.co.uk
fitnessingbyjessica.com
haar-spange.com
artotelamsterdam.com
sexandfessenjoon.wordpress.com
mousepad-direkt.de
onlyresultsmarketing.com
punchbaby.com
schraven.de
perbudget.com
baustb.de
danielblum.info
upmrkt.co
dpo-as-a-service.com
homesdollar.com
ditog.fr
parks-nuernberg.de
ncs-graphic-studio.com
fransespiegels.nl
rushhourappliances.com
synlab.lt
centrospgolega.com
durganews.com
tampaallen.com
nmiec.com
herbstfeststaefa.ch
you-bysia.com.au
kafu.ch
aakritpatel.com
drnice.de
iyengaryogacharlotte.com
remcakram.com
suncrestcabinets.ca
darnallwellbeing.org.uk
kedak.de
datacenters-in-europe.com
navyfederalautooverseas.com
waynela.com
praxis-foerderdiagnostik.de
conasmanagement.de
desert-trails.com
porno-gringo.com
sanaia.com
whittier5k.com
oemands.dk
ontrailsandboulevards.com
drfoyle.com
team-montage.dk
art2gointerieurprojecten.nl
berliner-versicherungsvergleich.de
pierrehale.com
centuryrs.com
eco-southafrica.com
bxdf.info
ai-spt.jp
lenreactiv-shop.ru
new.devon.gov.uk
mdk-mediadesign.de
johnsonfamilyfarmblog.wordpress.com
facettenreich27.de
dezatec.es
krcove-zily.eu
webcodingstudio.com
craigmccabe.fun
corendonhotels.com
marathonerpaolo.com
layrshift.eu
verifort-capital.de
highlinesouthasc.com
kaotikkustomz.com
wraithco.com
hiddencitysecrets.com.au
juneauopioidworkgroup.org
mediaacademy-iraq.org
vanswigchemdesign.com
craftleathermnl.com
lapinlviasennus.fi
hashkasolutindo.com
schutting-info.nl
oslomf.no
almosthomedogrescue.dog
abogadosadomicilio.es
zonamovie21.net
surespark.org.uk
partnertaxi.sk
helikoptervluchtnewyork.nl
hebkft.hu
jerling.de
pridoxmaterieel.nl
fensterbau-ziegler.de
dramagickcom.wordpress.com
yourobgyn.net
igorbarbosa.com
connectedace.com
pinkexcel.com
thewellnessmimi.com
humanityplus.org
augenta.com
bordercollie-nim.nl
boosthybrid.com.au
sinal.org
artallnightdc.com
newyou.at
braffinjurylawfirm.com
stemenstilte.nl
latribuessentielle.com
intecwi.com
love30-chanko.com
kuntokeskusrok.fi
1kbk.com.ua
schlafsack-test.net
eraorastudio.com
architecturalfiberglass.org
advizewealth.com
ziegler-praezisionsteile.de
steampluscarpetandfloors.com
modestmanagement.com
lusak.at
365questions.org
nhadatcanho247.com
admos-gleitlager.de
waveneyrivercentre.co.uk
crowcanyon.com
shonacox.com
wacochamber.com
quizzingbee.com
villa-marrakesch.de
space.ua
thenewrejuveme.com
rocketccw.com
bauertree.com
jsfg.com
ihr-news.jp
harveybp.com
phantastyk.com
behavioralmedicinespecialists.com
kmbshipping.co.uk
c-a.co.in
upplandsspar.se
summitmarketingstrategies.com
klusbeter.nl
stoeberstuuv.de
ateliergamila.com
denovofoodsgroup.com
berlin-bamboo-bikes.org
roygolden.com
aurum-juweliere.de
naswrrg.org
mediaclan.info
carlosja.com
romeguidedvisit.com
hypozentrum.com
coffreo.biz
dw-css.de
thailandholic.com
senson.fi
cursosgratuitosnainternet.com
kariokids.com
slashdb.com
chaotrang.com
croftprecision.co.uk
allure-cosmetics.at
comparatif-lave-linge.fr
vitavia.lt
olejack.ru
nakupunafoundation.org
baptisttabernacle.com
kojima-shihou.com
pt-arnold.de
kojinsaisei.info
smart-light.co.uk
deko4you.at
actecfoundation.org
qualitus.com
bouquet-de-roses.com
abogadoengijon.es
smale-opticiens.nl
softsproductkey.com
lichencafe.com
faronics.com
directwindowco.com
frontierweldingllc.com
katiekerr.co.uk
milsing.hr
joyeriaorindia.com
roadwarrior.app
cleliaekiko.online
vihannesporssi.fi
kidbucketlist.com.au
xn--rumung-bua.online
jbbjw.com
parebrise-tla.fr
danubecloud.com
global-kids.info
seitzdruck.com
skiltogprint.no
shhealthlaw.com
sagadc.com
dublikator.com
tomaso.gr
webhostingsrbija.rs
helenekowalsky.com
despedidascostablanca.es
proudground.org
otsu-bon.com
notsilentmd.org
elpa.se
atalent.fi
caribdoctor.org
servicegsm.net
solerluethi-allart.ch
edv-live.de
all-turtles.com
reddysbakery.com
xlarge.at
nijaplay.com
delchacay.com.ar
atozdistribution.co.uk
moveonnews.com
monark.com
zimmerei-deboer.de
tonelektro.nl
ceres.org.au
tinyagency.com
extraordinaryoutdoors.com
philippedebroca.com
carriagehousesalonvt.com
latestmodsapks.com
ki-lowroermond.nl
bsaship.com
geekwork.pl
drugdevice.org
teknoz.net
figura.team
blood-sports.net
testcoreprohealthuk.com
norpol-yachting.com
highimpactoutdoors.net
unetica.fr
ravensnesthomegoods.com
transportesycementoshidalgo.es
norovirus-ratgeber.de
myhealth.net.au
gw2guilds.org
executiveairllc.com
fotoideaymedia.es
solinegraphic.com
sahalstore.com
entopic.com
allfortheloveofyou.com
daklesa.de
dnepr-beskid.com.ua
xn--fn-kka.no
turkcaparbariatrics.com
garage-lecompte-rouen.fr
zweerscreatives.nl
hugoversichert.de
schoolofpassivewealth.com
vesinhnha.com.vn
supportsumba.nl
brandl-blumen.de
troegs.com
kaminscy.com
ora-it.de
bricotienda.com
todocaracoles.com
completeweddingkansas.com
nancy-informatique.fr
bowengroup.com.au
wurmpower.at
jandaonline.com
julis-lsa.de
ostheimer.at
buymedical.biz
cimanchesterescorts.co.uk
mercantedifiori.com
amylendscrestview.com
n1-headache.com
bouldercafe-wuppertal.de
zenderthelender.com
-
net
true
-
pid
$2a$10$Z.vLBbuByA3OGI00qFABDOx2/NqAOqewqa5Z/mCqYgmLwij8Ehm7.
-
prc
agntsvc
xfssvccon
onenote
isqlplussvc
thebat
ocomm
oracle
thunderbird
mydesktopservice
outlook
firefox
msaccess
dbsnmp
mspub
steam
winword
mydesktopqos
synctime
excel
dbeng50
ocautoupds
tbirdconfig
wordpad
sql
visio
infopath
encsvc
powerpnt
sqbcoreservice
ocssd
-
ransom_oneliner
All of your files are encrypted! STACKSFINANCE.COM.AU You have 5 days to pay or all the data of your customers will be in the public domain and sold! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- STACKSFINANCE.COM.AU You have 5 days to pay or all the data of your customers will be in the public domain and sold! [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.cc/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
3358
-
svc
backup
mepocs
sql
memtas
sophos
veeam
vss
svc$
Signatures
-
Sodinokibi family
Files
-
MCSP89.bin.zip.zip
Password: infected
-
MCSP89.bin.exe windows x86
Password: infected
5d1b05200eee34f0b6cb3c904e11102d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
lstrlenW
SetErrorMode
GetStdHandle
CreateFileW
WriteFile
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
GetCurrentThread
GetProcAddress
SetThreadAffinityMask
LoadLibraryA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
WriteConsoleW
IsProcessorFeaturePresent
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.evyg2f0 Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ