General
-
Target
12d60944c52bcc294d5c55bc20860ec7_JaffaCakes118
-
Size
164KB
-
Sample
240504-p679hsef4t
-
MD5
12d60944c52bcc294d5c55bc20860ec7
-
SHA1
37563cca9ff0ed0f4f4bed5e831d845cae3597c0
-
SHA256
2ca519d47ac0ab709cabe70a89504d134475d68be47081be4ccd758d371619a4
-
SHA512
16a2d8b9a6d592c822131fa94b3160af6a6a7ddba06934dd60b6dab97f2bd9e9e4fd2338aa45e458b33e5a1f612bed36cd7a848f9bf5788e51f9f3636275270d
-
SSDEEP
3072:ffYWjswg4fQlt4ndm8jX5IXzs+M9VQHDOoOarvil:ffYWAw9fcUdmwIXo+M9VQHDZOAi
Behavioral task
behavioral1
Sample
12d60944c52bcc294d5c55bc20860ec7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
12d60944c52bcc294d5c55bc20860ec7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
sodinokibi
16
1390
innovationgames-brabant.nl
ravage-webzine.nl
auberives-sur-vareze.fr
leatherjees.com
patriotcleaning.net
toranjtuition.org
charlottelhanna.com
wasnederland.nl
bridalcave.com
bodymindchallenger.com
moira-cristescu.com
ced-elec.com
hutchstyle.co.uk
chainofhopeeurope.eu
bilius.dk
skyboundnutrition.co.uk
watchsale.biz
banukumbak.com
ingresosextras.online
jefersonalessandro.com
craftron.com
electricianul.com
jameswilliamspainting.com
onlinetvgroup.com
nxtstg.org
cascinarosa33.it
magrinya.net
amyandzac.com
maryairbnb.wordpress.com
ncjc.ca
docarefoundation.org
loysonbryan.com
jeanmonti.com
iexpert99.com
ayudaespiritualtamara.com
agenceassemble.fr
daveystownhouse.com
loparnille.se
sppdstats.com
augen-praxisklinik-rostock.de
rvside.com
focuskontur.com
xtensifi.com
jobstomoveamerica.org
masecologicos.com
ilovefullcircle.com
comoserescritor.com
global-migrate.com
ronaldhendriks.nl
furland.ru
catchup-mag.com
achetrabalhos.com
nieuwsindeklas.be
floweringsun.org
coachpreneuracademy.com
business-basic.de
buffdaddyblog.com
jollity.hu
mahikuchen.com
thegrinningmanmusical.com
liveyourheartout.co
apogeeconseils.fr
latableacrepes-meaux.fr
gta-jjb.fr
bonitabeachassociation.com
jglconsultancy.com
sytzedevries.com
xn--billigafrgpatroner-stb.se
mgimalta.com
craftingalegacy.com
simpleitsolutions.ch
leopoldineroux.com
zaczytana.com
brannbornfastigheter.se
altocontatto.net
boloria.de
stathmoulis.gr
wrinstitute.org
solidhosting.nl
imajyuku-sozoku.com
brinkdoepke.eu
nginx.com
cxcompany.com
skolaprome.eu
hypogenforensic.com
rename.kz
carsten.sparen-it.de
csaballoons.com
sachainchiuk.com
wyreforest.net
mac-computer-support-hamburg.de
rokthetalk.com
beauty-traveller.com
t3brothers.com
dennisverschuur.com
mangimirossana.it
rentingwell.com
drbenveniste.com
redctei.co
polynine.com
donau-guides.eu
dinecorp.com
bumbipdeco.site
campusce.com
affligemsehondenschool.be
fire-space.com
campusescalade.com
sharonalbrightdds.com
pinkxgayvideoawards.com
schroederschoembs.com
webforsites.com
vapiano.fr
qrs-international.com
lexced.com
iron-mine.ru
suonenjoen.fi
lidkopingsnytt.nu
oncarrot.com
andermattswisswatches.ch
scentedlair.com
bg.szczecin.pl
site.markkit.com.br
akcadagofis.com
stoneridgemontessori.com
pokemonturkiye.com
triplettabordeaux.fr
scietech.academy
the-cupboard.co.uk
buzzneakers.com
profiz.com
premier-iowa.com
pilotgreen.com
letsstopsmoking.co.uk
pansionatblago.ru
laylavalentine.com
cyberpromote.de
napisat-pismo-gubernatoru.ru:443
thesilkroadny.com
eafx.pro
janmorgenstern.com
littlesaints.academy
groovedealers.ru
ownidentity.com
sealgrinderpt.com
stabilisateur.fr
richardiv.com
avis.mantova.it
selected-minds.de
agora-collectivites.com
brighthillgroup.com
omegamarbella.com
p-ride.live
encounter-p.net
noda.com.ua
corporacionrr.com
c-sprop.com
letterscan.de
chris-anne.com
rizplakatjaya.com
explora.nl
antesacademy.it
o2o-academy.com
forskolinslimeffect.net
arearugcleaningnyc.com
jandhpest.com
sellthewrightway.com
janasfokus.com
saboboxtel.uk
hotelturbo.de
tages-geldvergleich.de
autoteamlast.de
skoczynski.eu
sber-biznes.com
brunoimmobilier.com
log-barn.co.uk
cymru.futbol
pourlabretagne.bzh
gsconcretecoatings.com
gosouldeep.com
poems-for-the-soul.ch
nauticmarine.dk
riffenmattgarage.ch
bookingwheel.com
adabible.org
dentalcircle.com
vitoriaecoturismo.com.br
vdolg24.online
ruggestar.ch
tanatek.com
espaciopolitica.com
endstarvation.com
trainiumacademy.com
diverfiestas.com.es
chomiksy.net
fanuli.com.au
keyboardjournal.com
awaisghauri.com
subquercy.fr
mneti.ru
bluelakevision.com
memphishealthandwellness.com
carolynfriedlander.com
factoriareloj.com
bakingismyyoga.com
subyard.com
satoblog.org
advesa.com
topautoinsurers.net
avisioninthedesert.com
wordpress.idium.no
azloans.com
alabamaroofingllc.com
fskhjalmar.se
lisa-poncon.fr
triplettagaite.fr
michaelfiegel.com
photonag.com
der-stempelking.de
fsbforsale.com
therapybusinessacademy.com
buonabitare.com
domaine-des-pothiers.com
amco.net.au
harleystreetspineclinic.com
datatri.be
cesep2019.com
soundseeing.net
neonodi.be
optigas.com
hiddensee-buhne11.de
cmascd.com
volta.plus
kenmccallum.com
christopherhannan.com
fann.ru
pxsrl.it
ncn.nl
hawthornsretirement.co.uk
istantidigitali.com
lesyeuxbleus.net
blucamp.com
metcalfe.ca
speiserei-hannover.de
agencewho-aixenprovence.fr
alattekniksipil.com
mslp.org
matteoruzzaofficial.com
kvetymichalovce.sk
kompresory-opravy.com
almamidwifery.com
ronielyn.com
line-x.co.uk
kuriero.pro
biblica.com
pixelhealth.net
ninjaki.com
devus.de
xn--80addfr4ahr.dp.ua
qwikcoach.com
ygallerysalonsoho.com:443
skinkeeper.li
digitale-elite.de
a-zpaperwork.eu
sveneulberg.de
nalliasmali.net
gurutechnologies.net
goodboyscustom.com
lumturo.academy
jlwilsonbooks.com
sochi-okna23.ru
morgansconsult.com
kiraribeaute-nani.com
3daywebs.com
eatyoveges.com
domilivefurniture.com
teamsegeln.ch
betterce.com
90nguyentuan.com
specialtyhomeservicesllc.com
palema.gr
tetameble.pl
dogsunlimitedguide.com
nexstagefinancial.com
altitudeboise.com
cc-experts.de
askstaffing.com
markseymourphotography.co.uk
fotoeditores.com
humanviruses.org
geitoniatonaggelon.gr
5thactors.com
alaskaremote.com
springfieldplumbermo.com
primemarineengineering.com
curtsdiscountguns.com
rattanwarehouse.co.uk
nykfdyrehospital.dk
yourcosmicbeing.com
zorgboerderijravensbosch.nl
professionetata.com
internalresults.com
rhino-storage.co.uk
drnelsonpediatrics.com
distrifresh.com
andrealuchesi.it
atelierkomon.com
kryddersnapsen.dk
yuanshenghotel.com
malevannye.ru
oro.ae
netadultere.fr
gratiocafeblog.wordpress.com
worldproskitour.com
fixx-repair.com
mrcar.nl
sunsolutions.es
nourella.com
unboxtherapy.site
irizar.com
stagefxinc.com
rarefoods.ro
epicjapanart.com
midwestschool.org
stressreliefadvice.com
lookandseen.com
forumsittard.nl
katherinealy.com
tesisatonarim.com
dinedrinkdetroit.com
envomask.com
nvisionsigns.com
catering.com
maxcube24.com.ua
cuadc.org
aquacheck.co.za
clinic-beethovenstrasse-ag.ch
davedavisphotos.com
cssp-mediation.org
osn.ro
bringmehope.org
ziliak.com
operativadigital.com
phoenixcrane.com
cp-bap.de
babysitting-hk.helpergo.co
galaniuklaw.com
parseport.com
arthakapitalforvaltning.dk
speakaudible.com
louiedager.com
oexebusiness.com
bodet150ans.com
computer-place.de
traitware.com
signededenroth.dk
ideamode.com
animation-pro.co.uk
pazarspor.org.tr
vedsegaard.dk
reputation-medical.online
sshomme.com
invela.dk
tutvracks.com
dieetuniversiteit.nl
mrkluttz.com
stanleyqualitysystems.com
texanscan.org
min-virksomhed.dk
renderbox.ch
lgiwines.com
glende-pflanzenparadies.de
heimdalbygg.no
smarttourism.academy
neolaiamedispa.com
stringnosis.academy
fascaonline.com
zinnystar.com
georgemuncey.com
smartercashsystem.com
perfectgrin.com
go.labibini.ch
edvestors.org
citydogslife.com
sololibrerie.it
goddardleadership.org
leansupremegarcinia.net
cotton-avenue.co.il
nevadaruralhousingstudies.org
guohedd.com
kristianboennelykke.dk
scotlandsroute66.co.uk
heuvelland-oaze.nl
rsidesigns.com
outstandingminialbums.com
enactusnhlstenden.com
hekecrm.com
boomerslivinglively.com
mikegoodfellow.co.uk
bescomedical.de
biketruck.de
trevi-vl.ru
mesajjongeren.nl
martinipstudios.com
omnicademy.com
pedmanson.com
tieronechic.com
k-zubki.ru
ketomealprep.academy
burg-zelem.de
circlecitydj.com
enews-qca.com
christianscholz.de
reygroup.pt
mazzaropi.com.br
nationnewsroom.com
cardsandloyalty.com
bjornvanvulpen.nl
theintellect.edu.pk
strauchs-wanderlust.info
deziplan.ru
jax-interim-and-projectmanagement.com
acumenconsultingcompany.com
alcye.com
luvinsburger.fr
slideevents.be
lyricalduniya.com
tilldeeke.de
ultimatelifesource.com
bcmets.info
purepreprod4.com
aslog.fr
pisofare.co
housesofwa.com
ikzoekgod.be
silkeight.com
sprintcoach.com
piestar.com
luvbec.com
narca.net
block-optic.com
powershell.su
girlish.ae
johnsonweekly.com
avtoboss163.ru:443
limmortelyouth.com
rozmata.com
baita.ac
mindfuelers.com
queertube.net
veggienessa.com
haard-totaal.nl
premiumweb.com.ua:443
mariamalmahdi.com
breathebettertolivebetter.com
skidpiping.de
chatberlin.de
ilveshistoria.com
newonestop.com
k-v-f.de
yayasanprimaunggul.org
grancanariaregional.com
expohomes.com
bluetenreich-brilon.de
fitnessblenderstory.com
zwemofficial.nl
michal-s.co.il
birthplacemag.com
mediogiro.com.ar
airvapourbarrier.com
putzen-reinigen.com
jacquesgarcianoto.com
asiaartgallery.jp
molinum.pt
fazagostar.co
wg-heiligenstadt.de
metroton.ru
lmmont.sk
promus.ca
tzn.nu
tchernia-conseil.fr
collegetennis.info
kombi-dress.com
magnetvisual.com
lassocrm.com
pharmeko-group.com
entdoctor-durban.com
alwaysdc.com
abulanov.com
johnkoen.com
karmeliterviertel.com
mediabolmong.com
2020hindsight.info
gavelmasters.com
the-beauty-guides.com
customroasts.com
palmecophilippines.com
shrinkingplanet.com
qandmmusiccenter.com
insane.agency
charlesfrancis.photos
bundan.com
hepishopping.com
nrgvalue.com
akwaba-safaris.com
signamedia.de
sbit.ag
karelinjames.com
studionumerik.fr
victorvictoria.com
raeoflightmusic.com
schlagbohrmaschinetests.com
parentsandkids.com
fidelitytitleoregon.com
universelle.fr
mieleshopping.it
paradigmlandscape.com
hotjapaneselesbian.com
bayshoreelite.com
amorbellezaysalud.com
goeppinger-teppichreinigung.de
welovecustomers.fr
eurethicsport.eu
test-teleachat.fr
wribrazil.com
voetbalhoogeveen.nl
11.in.ua
cookinn.nl
theatre-embellie.fr
ahgarage.com
pankiss.ru
anchelor.com
tecleados.com
zdrowieszczecin.pl
marmarabasin.com
denverwynkoopdentist.com
justaroundthecornerpetsit.com
colored-shelves.com
greenrider.nl
wallflowersandrakes.com
baikalflot.ru
billigeflybilletter.dk
5pointpt.com
renehartman.nl
jakubrybak.com
ox-home.com
boyfriendsgoal.site
goodherbalhealth.com
auto-opel.ro
hameghlim.com
onlinemarketingsurgery.co.uk
transifer.fr
grupoexin10.com
evsynthacademy.org
agriturismocastagneto.it
eyedoctordallas.com
mustangmarketinggroup.com
glas-kuck.de
alene.co
profibersan.com
brisbaneosteopathic.com.au
frimec-international.es
dibli.store
nutriwell.com.sg
bertbutter.nl
mundo-pieces-auto.fr
liverpoolabudhabi.ae
leijstrom.com
aoyama.ac
initconf.com
interlinkone.com
theater-lueneburg.de
projektparkiet.pl
photographycreativity.co.uk
sambaglow.com
tastevirginia.com
richardkershawwines.co.za
tramadolhealth.com
trivselsguide.dk
juergenblaetz.de
unexplored.gr
mayprogulka.ru
latteswithleslie.com
leadforensics.com
supercarhire.co.uk
belofloripa.be
spectamarketingdigital.com.br
crestgood.com
denhaagfoodie.nl
lifeinbreaths.com
billscars.net
hostaletdelsindians.es
bendel-partner.de
delegationhub.com
angelsmirrorus.com
verbouwingsdouche.nl
spirello.nl
rhino-turf.com
livedeveloper.com
hoteltantra.com
epsondriversforwindows.com
sweetz.fr
rivermusic.nl
mindsparkescape.com
theboardroomafrica.com
adterium.com
mensemetgesigte.co.za
oraweb.net
thehovecounsellingpractice.co.uk
prodentalblue.com
cmeow.com
ramirezprono.com
iactechnologies.net
pinthelook.com
billyoart.com
ciga-france.fr
stitch-n-bitch.com
tellthebell.website
lagschools.ng
radishallgood.com
oththukaruva.com
vvego.com
weddingceremonieswithtim.com
activeterroristwarningcompany.com
thiagoperez.com
skyscanner.ro
rolleepollee.com
azerbaycanas.com
imagine-entertainment.com
tweedekansenloket.nl
thenalpa.com
sycamoregreenapts.com
centuryvisionglobal.com
shortysspices.com
alexwenzel.de
thepixelfairy.com
mercadodelrio.com
animalfood-online.de
otpusk.zp.ua
smartworkplaza.com
direitapernambuco.com
redpebblephotography.com
andreaskildegaard.dk
gazelle-du-web.com
dreamvoiceclub.org
condormobile.fr
look.academy
tbalp.co.uk
palmenhaus-erfurt.de
oscommunity.de
uncensoredhentaigif.com
jobkiwi.com.ng
grafikstudio-visuell.de
duthler.nl
saint-malo-developpement.fr
jayfurnitureco.com
dmlcpa.com
mariajosediazdemera.com
concontactodirecto.com
endlessrealms.net
lsngroupe.com
miscbo.it
secrets-clubs.co.uk
arazi.eus
ivancacu.com
quitescorting.com
landgoedspica.nl
lashandbrowenvy.com
bychowo.pl
keuken-prijs.nl
kryptos72.com
bcabattoirs.org
ikadomus.com
skooppi.fi
dr-vita.de
kafkacare.com
kausette.com
holocine.de
motocrosshideout.com
jlgraphisme.fr
publicompserver.de
ntinasfiloxenia.gr
brownswoodblog.com
bulyginnikitav.000webhostapp.com
breakluckrecords.com
smartspeak.com
m2graph.fr
kerstliedjeszingen.nl
linkbuilding.life
anleggsregisteret.no
catalyseurdetransformation.com
licensed-public-adjuster.com
ufovidmag.com
valiant-voice.com
pro-gamer.pl
yvesdoin-aquarelles.fr
deduktia.fi
lunoluno.com
bajova.sk
opt4cdi.com
kamin-somnium.de
kosten-vochtbestrijding.be
bohrlochversicherung.info
tatyanakopieva.ru
testitjavertailut.net
finnergo.eu
klapanvent.ru
b3b.ch
santastoy.store
spacebel.be
slotspinner.com
framemyballs.com
fta-media.com
descargandoprogramas.com
successcolony.com.ng
mursall.de
logosindustries.com
nicksrock.com
terraflair.de
paardcentraal.nl
cincinnatiphotocompany.org
schluesseldienste-hannover.de
switch-made.com
broccolisoep.nl
johnstonmingmanning.com
druktemakersheerenveen.nl
randyabrown.com
adaduga.info
parisschool.ru
mollymccarthydesign.com
placermonticello.com
vipcarrental.ae
airserviceunlimited.com
itheroes.dk
oportowebdesign.com
makingmillionaires.net
xn--ziinoapte-6ld.ro
smartmind.net
afbudsrejserallinclusive.dk
saberconcrete.com
kdbrh.com
leloupblanc.gr
finsahome.co.uk
aciscomputers.com
artcase.pl
craftstone.co.nz
lattalvor.com
malzomattalar.com
berdonllp.com
chorusconsulting.net
carmel-york.com
ceocenters.com
perceptdecor.com
myplaywin3.com
elliemaccreative.wordpress.com
thisprettyhair.com
pubcon.com
albcleaner.fr
alharsunindo.com
tothebackofthemoon.com
directique.com
jobscore.com
linearete.com
motocrossplace.co.uk
rishigangoly.com
eos-horlogerie.com
fysiotherapierijnmond.nl
precisetemp.com
jimprattmediations.com
turing.academy
mondolandscapes.com
web865.com
bourchier.org
gbk-tp1.de
ijsselbeton.nl
aidanpublishing.co.uk
angelika-schwarz.com
kelsigordon.com
advanced-removals.co.uk
opticahubertruiz.com
beandrivingschool.com.au
silverbird.dk
thestudio.academy
hnkns.com
agrifarm.dk
9nar.com
artvark.nl
bd2fly.com
so-sage.fr
aberdeenartwalk.org
khtrx.com
annida.it
indiebizadvocates.org
startuplive.org
vitormmcosta.com
egpu.fr
aceroprime.com
cainlaw-okc.com
imaginekithomes.co.nz
fbmagazine.ru
nepal-pictures.com
kartuindonesia.com
ocduiblog.com
zealcon.ae
aheadloftladders.co.uk
casinodepositors.com
kemtron.fr
olry-cloisons.fr
physio-lang.de
bubbalucious.com
hvitfeldt.dk
gatlinburgcottage.com
amelielecompte.wordpress.com
hensleymarketing.com
lovetzuchia.com
111firstdelray.com
bagaholics.in
baumfinancialservices.com
easydental.ae
sarahspics.co.uk
myfbateam.com
slotenmakerszwijndrecht.nl
kickittickets.com
edrickennedymacfoy.com
soncini.ch
advance-refle.com
acibademmobil.com.tr
plbinsurance.com
drbrianhweeks.com
banksrl.co.za
rechtenplicht.be
jmmartinezilustrador.com
greeneyetattoo.com
angeleyezstripclub.com
designimage.ae
onesynergyinternational.com
elex.is
richardmaybury.co.uk
fotoslubna.com
dentourage.com
cl0nazepamblog.com
advancedeyecare.com
flossmoordental.com
pureelements.nl
kroophold-sjaelland.dk
agendatwentytwenty.com
metriplica.academy
koncept-m.ru
bluemarinefoundation.com
frankgoll.com
fluzfluzrewards.com
graygreenbiomedservices.com
cormanmarketing.com
wineandgo.hu
eventosvirtualesexitosos.com
globalcompliancenews.com
funworx.de
rentsportsequip.com
nepressurecleaning.com
barbaramcfadyenjewelry.com
penumbuhrambutkeiskei.com
mike.matthies.de
arabianmice.com
natturestaurante.com.br
atma.nl
happylublog.wordpress.com
xrresources.com
pays-saint-flour.fr
racefietsenblog.nl
julielusktherapy.com
thegetawaycollective.com
n-newmedia.de
the3-week-diet.net
drvoip.com
lapponiasafaris.com
dentallabor-luenen.de
taulunkartano.fi
cac2040.com
factorywizuk.com
martha-frets-ceramics.nl
lovcase.com
energosbit-rp.ru
ledyoucan.com
ludoil.it
laaisterplakky.nl
spartamovers.com
eastgrinsteadwingchun.com
aktivfriskcenter.se
happycatering.de
gardenpartner.pl
circuit-diagramz.com
scholarquotes.com
elitkeramika-shop.com.ua
handyman-silkeborg.dk
husetsanitas.dk
geoweb.software
campinglaforetdetesse.com
gaearoyals.com
hartofurniture.com
the5thquestion.com
rs-danmark.dk
annenymus.com
mazift.dk
galatee-couture.com
alisodentalcare.com
cap29010.it
chinowarehousespace.com
wademurray.com
frameshift.it
marcandy.com
parksideseniorliving.net
devplus.be
hinotruckwreckers.com.au
topvijesti.net
alltagsrassismus-entknoten.de
astrographic.com
mamajenedesigns.com
unislaw-narty.pl
bratek-immobilien.de
etgdogz.de
clemenfoto.dk
bruut.online
hawaiisteelbuilding.com
production-stills.co.uk
dantreranch.com
apiarista.de
peppergreenfarmcatering.com.au
medicalsupportco.com
protoplay.ca
chatterchatterchatter.com
naukaip.ru
haus-landliebe.de
stage-infirmier.fr
buerocenter-butzbach-werbemittel.de
alpesiberie.com
tradenavigator.ch
innervisions-id.com
salonlamar.nl
citiscapes-art.com
hom-frisor.dk
kookooo.com
yourhappyevents.fr
legundschiess.de
jag.me
hostingbangladesh.net
molade.nl
awaitspain.com
baptistdistinctives.org
cops4causes.org
relevantonline.eu
fla.se
ya-elka.ru
eshop.design
jaaphoekzema.nl
walterman.es
metallbau-hartmann.eu
greatofficespaces.net
whoopingcrane.com
efficiencyconsulting.es
pajagus.fr
monstarrsoccer.com
levencovka.ru
manzel.tn
futurenetworking.com
yournextshoes.com
orchardbrickwork.com
xn--80abehgab4ak0ddz.xn--p1ai
larchwoodmarketing.com
janellrardon.com
phukienbepthanhdat.com
dnqa.co.uk
blavait.fr
mjk.digital
fi-institutionalfunds.com
zuerich-umzug.ch
four-ways.com
ebible.co
wirmuessenreden.com
stralsund-ansichten.de
rino-gmbh.com
solutionshosting.co.uk
biodentify.ai
margaretmcshane.com
adedesign.com
atrgroup.it
belinda.af
muni.pe
alnectus.com
blueridgeheritage.com
rubyaudiology.com
dcc-eu.com
prometeyagro.com.ua
limounie.com
foerderverein-vatterschule.de
bavovrienden.nl
o90.dk
rtc24.com
inewsstar.com
hm-com.com
modamarfil.com
towelroot.co
acornishstudio.co.uk
reizenmetkinderen.be
proffteplo.com
from02pro.com
die-immo-agentur.de
mrmac.com
sjtpo.org
benchbiz.com
creohn.de
peninggibadan.co.id
teethinadaydentalimplants.com
triavlete.com
patassociation.com
internestdigital.com
diakonie-weitramsdorf-sesslach.de
kellengatton.com
uci-france.fr
jonnyhooley.com
levelseven.be
rapid5kloan.org
eksperdanismanlik.com
krishnabrawijaya.com
livelai.com
dierenambulancealkmaar.nl
shortsalemap.com
lollachiro.com
acb-gruppe.ch
mariannelemenestrel.com
claudiakilian.de
nbva.co.uk
globalskills.pt
voice2biz.com
axisoflove.org:443
allinonecampaign.com
ykobbqchicken.ca
apmollerpension.com
dayenne-styling.nl
ddmgen.com
1deals.com
mbuildinghomes.com
basindentistry.com
cleanroomequipment.ie
bellesiniacademy.org
g2mediainc.com
paprikapod.com
rossomattonecase.it
suitesartemis.gr
forextimes.ru
nuohous.com
techybash.com
schulz-moelln.de
jdscenter.com
witraz.pl
matthieupetel.fr
bmw-i-pure-impulse.com
pvandambv.nl
fridakids.com
liepertgrafikweb.at
awag-blog.de
hostastay.com
werkzeugtrolley.net
mediahub.co.nz
muller.nl
zumrutkuyutemel.com
jalkapuu.net
utilisacteur.fr
teutoradio.de
golfclublandgoednieuwkerk.nl
singletonfinancial.com
glennverschueren.be
innersurrection.com
mind2muscle.nl
hospitalitytrainingsolutions.co.uk
-
net
false
-
pid
16
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
1390
Extracted
C:\Users\wy36fc-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/6C3D83F5201C8948
http://decryptor.top/6C3D83F5201C8948
Extracted
C:\Recovery\t4jbvr9-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/EC0EE6A17F515D06
http://decryptor.top/EC0EE6A17F515D06
Targets
-
-
Target
12d60944c52bcc294d5c55bc20860ec7_JaffaCakes118
-
Size
164KB
-
MD5
12d60944c52bcc294d5c55bc20860ec7
-
SHA1
37563cca9ff0ed0f4f4bed5e831d845cae3597c0
-
SHA256
2ca519d47ac0ab709cabe70a89504d134475d68be47081be4ccd758d371619a4
-
SHA512
16a2d8b9a6d592c822131fa94b3160af6a6a7ddba06934dd60b6dab97f2bd9e9e4fd2338aa45e458b33e5a1f612bed36cd7a848f9bf5788e51f9f3636275270d
-
SSDEEP
3072:ffYWjswg4fQlt4ndm8jX5IXzs+M9VQHDOoOarvil:ffYWAw9fcUdmwIXo+M9VQHDZOAi
Score10/10-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-