General
-
Target
1e13416a37f6abaa3abafc701760fe81_JaffaCakes118
-
Size
165KB
-
Sample
240506-yfgtbagb7s
-
MD5
1e13416a37f6abaa3abafc701760fe81
-
SHA1
9b767c6c7aaace08c934f922ff3d9aae056fdb0a
-
SHA256
b46db6bba1f77f8e3378b6f07a789d19500ae7dece3c09c10549a88b04f47867
-
SHA512
ba75d54d07a2b57381d72e626a11f16ec17c6db5bf02ca004b10c8876703478f614596c37e083deaa98a7472efc0441ba2acebc8d57a430d9e0cc3c7c88d833f
-
SSDEEP
3072:eCEq0R0nZ5ys5n4Y9doh7O79siUs/Na5dz7ZVMoJk71fC8:lw02sJPi7O93NqlVMoM
Behavioral task
behavioral1
Sample
1e13416a37f6abaa3abafc701760fe81_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1e13416a37f6abaa3abafc701760fe81_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Extracted
sodinokibi
28
1965
mieleshopping.it
renderbox.ch
letsstopsmoking.co.uk
pisofare.co
ketomealprep.academy
grupoexin10.com
specialtyhomeservicesllc.com
masecologicos.com
ebible.co
dr-vita.de
circlecitydj.com
pinthelook.com
mondolandscapes.com
forextimes.ru
go.labibini.ch
ykobbqchicken.ca
soncini.ch
qwikcoach.com
rs-danmark.dk
wribrazil.com
glennverschueren.be
onlinetvgroup.com
logosindustries.com
promus.ca
triplettagaite.fr
nuohous.com
babysitting-hk.helpergo.co
bruut.online
magnetvisual.com
maryairbnb.wordpress.com
medicalsupportco.com
skolaprome.eu
metriplica.academy
solutionshosting.co.uk
axisoflove.org:443
aoyama.ac
kryddersnapsen.dk
circuit-diagramz.com
cac2040.com
mneti.ru
site.markkit.com.br
goeppinger-teppichreinigung.de
nieuwsindeklas.be
laaisterplakky.nl
5pointpt.com
matthieupetel.fr
jonnyhooley.com
kryptos72.com
greeneyetattoo.com
slotenmakerszwijndrecht.nl
pedmanson.com
ijsselbeton.nl
enews-qca.com
amco.net.au
kenmccallum.com
schroederschoembs.com
lumturo.academy
avtoboss163.ru:443
bodymindchallenger.com
elitkeramika-shop.com.ua
thiagoperez.com
biblica.com
brannbornfastigheter.se
berdonllp.com
motocrosshideout.com
computer-place.de
peninggibadan.co.id
outstandingminialbums.com
lapponiasafaris.com
stathmoulis.gr
jacquesgarcianoto.com
startuplive.org
ya-elka.ru
proffteplo.com
studionumerik.fr
metcalfe.ca
sarahspics.co.uk
lesyeuxbleus.net
teutoradio.de
witraz.pl
grafikstudio-visuell.de
production-stills.co.uk
cmeow.com
vipcarrental.ae
beandrivingschool.com.au
limounie.com
testitjavertailut.net
oexebusiness.com
humanviruses.org
awaitspain.com
collegetennis.info
almamidwifery.com
nykfdyrehospital.dk
watchsale.biz
leadforensics.com
stagefxinc.com
brownswoodblog.com
datatri.be
mundo-pieces-auto.fr
trevi-vl.ru
endstarvation.com
kosten-vochtbestrijding.be
midwestschool.org
liepertgrafikweb.at
mindfuelers.com
vedsegaard.dk
ntinasfiloxenia.gr
profibersan.com
rechtenplicht.be
profiz.com
fitnessblenderstory.com
signededenroth.dk
brunoimmobilier.com
mindsparkescape.com
metroton.ru
shortsalemap.com
donau-guides.eu
hekecrm.com
bcabattoirs.org
aquacheck.co.za
billigeflybilletter.dk
larchwoodmarketing.com
goodherbalhealth.com
bubbalucious.com
slideevents.be
toranjtuition.org
antesacademy.it
raeoflightmusic.com
evsynthacademy.org
stanleyqualitysystems.com
encounter-p.net
poems-for-the-soul.ch
victorvictoria.com
parksideseniorliving.net
richardmaybury.co.uk
docarefoundation.org
manzel.tn
3daywebs.com
eastgrinsteadwingchun.com
futurenetworking.com
m2graph.fr
gratiocafeblog.wordpress.com
5thactors.com
devus.de
leopoldineroux.com
breathebettertolivebetter.com
forskolinslimeffect.net
saint-malo-developpement.fr
hawaiisteelbuilding.com
airserviceunlimited.com
framemyballs.com
kroophold-sjaelland.dk
ninjaki.com
dentourage.com
biketruck.de
aheadloftladders.co.uk
agrifarm.dk
khtrx.com
gta-jjb.fr
shortysspices.com
c-sprop.com
slotspinner.com
wallflowersandrakes.com
lovcase.com
sharonalbrightdds.com
schluesseldienste-hannover.de
strauchs-wanderlust.info
kamin-somnium.de
zinnystar.com
nepal-pictures.com
wineandgo.hu
neolaiamedispa.com
oraweb.net
clinic-beethovenstrasse-ag.ch
michal-s.co.il
adabible.org
xn--80abehgab4ak0ddz.xn--p1ai
lattalvor.com
suitesartemis.gr
cc-experts.de
bellesiniacademy.org
zuerich-umzug.ch
avisioninthedesert.com
agencewho-aixenprovence.fr
quitescorting.com
augen-praxisklinik-rostock.de
johnstonmingmanning.com
entdoctor-durban.com
hypogenforensic.com
bluemarinefoundation.com
chatberlin.de
kvetymichalovce.sk
bd2fly.com
placermonticello.com
mind2muscle.nl
hostaletdelsindians.es
napisat-pismo-gubernatoru.ru:443
innovationgames-brabant.nl
biodentify.ai
leijstrom.com
anchelor.com
professionetata.com
sshomme.com
the-cupboard.co.uk
wrinstitute.org
funworx.de
greenrider.nl
mercadodelrio.com
pro-gamer.pl
muni.pe
glende-pflanzenparadies.de
animalfood-online.de
log-barn.co.uk
scietech.academy
levelseven.be
maxcube24.com.ua
trainiumacademy.com
hameghlim.com
marcandy.com
the3-week-diet.net
smartmind.net
k-zubki.ru
premier-iowa.com
keuken-prijs.nl
voetbalhoogeveen.nl
pixelhealth.net
limmortelyouth.com
drbenveniste.com
jobkiwi.com.ng
bonitabeachassociation.com
lagschools.ng
smarttourism.academy
girlish.ae
mediahub.co.nz
directique.com
juergenblaetz.de
jdscenter.com
die-immo-agentur.de
yayasanprimaunggul.org
druktemakersheerenveen.nl
haard-totaal.nl
vitormmcosta.com
utilisacteur.fr
lyricalduniya.com
peppergreenfarmcatering.com.au
devplus.be
espaciopolitica.com
lassocrm.com
stringnosis.academy
saberconcrete.com
jimprattmediations.com
rentsportsequip.com
cincinnatiphotocompany.org
yourcosmicbeing.com
zdrowieszczecin.pl
projektparkiet.pl
elex.is
atrgroup.it
cssp-mediation.org
chorusconsulting.net
barbaramcfadyenjewelry.com
worldproskitour.com
angelsmirrorus.com
ddmgen.com
topautoinsurers.net
hoteltantra.com
denverwynkoopdentist.com
reygroup.pt
skinkeeper.li
dreamvoiceclub.org
alwaysdc.com
glas-kuck.de
internestdigital.com
eatyoveges.com
karelinjames.com
brighthillgroup.com
ronielyn.com
xn--80addfr4ahr.dp.ua
frimec-international.es
brisbaneosteopathic.com.au
flossmoordental.com
business-basic.de
jayfurnitureco.com
blucamp.com
1deals.com
test-teleachat.fr
concontactodirecto.com
eurethicsport.eu
chatterchatterchatter.com
amelielecompte.wordpress.com
tetameble.pl
modamarfil.com
fidelitytitleoregon.com
jglconsultancy.com
mariannelemenestrel.com
zaczytana.com
julielusktherapy.com
ivancacu.com
markseymourphotography.co.uk
hensleymarketing.com
sjtpo.org
haus-landliebe.de
wademurray.com
leloupblanc.gr
dennisverschuur.com
agriturismocastagneto.it
rattanwarehouse.co.uk
activeterroristwarningcompany.com
condormobile.fr
molinum.pt
photographycreativity.co.uk
luvbec.com
baita.ac
rizplakatjaya.com
signamedia.de
malevannye.ru
ilveshistoria.com
perceptdecor.com
o90.dk
gatlinburgcottage.com
neonodi.be
ziliak.com
deziplan.ru
kafkacare.com
avis.mantova.it
sber-biznes.com
palmecophilippines.com
paradigmlandscape.com
koncept-m.ru
boloria.de
foerderverein-vatterschule.de
istantidigitali.com
xtensifi.com
wirmuessenreden.com
texanscan.org
sellthewrightway.com
suonenjoen.fi
jefersonalessandro.com
paardcentraal.nl
bridalcave.com
aslog.fr
speakaudible.com
janmorgenstern.com
burg-zelem.de
edvestors.org
kdbrh.com
asiaartgallery.jp
ox-home.com
apmollerpension.com
diakonie-weitramsdorf-sesslach.de
santastoy.store
xrresources.com
furland.ru
whoopingcrane.com
jalkapuu.net
alpesiberie.com
ikzoekgod.be
memphishealthandwellness.com
livedeveloper.com
fixx-repair.com
gardenpartner.pl
ramirezprono.com
agendatwentytwenty.com
wordpress.idium.no
rubyaudiology.com
eshop.design
fanuli.com.au
yuanshenghotel.com
amyandzac.com
letterscan.de
heimdalbygg.no
bertbutter.nl
spirello.nl
spacebel.be
jameswilliamspainting.com
the-beauty-guides.com
enactusnhlstenden.com
tieronechic.com
creohn.de
kookooo.com
lovetzuchia.com
theater-lueneburg.de
makingmillionaires.net
bmw-i-pure-impulse.com
kausette.com
skyscanner.ro
soundseeing.net
chris-anne.com
chainofhopeeurope.eu
rhino-turf.com
omegamarbella.com
dinedrinkdetroit.com
bendel-partner.de
ruggestar.ch
satoblog.org
prometeyagro.com.ua
angeleyezstripclub.com
protoplay.ca
tbalp.co.uk
jmmartinezilustrador.com
voice2biz.com
auto-opel.ro
walterman.es
tothebackofthemoon.com
springfieldplumbermo.com
schulz-moelln.de
explora.nl
eksperdanismanlik.com
mazzaropi.com.br
bavovrienden.nl
initconf.com
daveystownhouse.com
allinonecampaign.com
easydental.ae
techybash.com
carsten.sparen-it.de
olry-cloisons.fr
mikegoodfellow.co.uk
jobscore.com
afbudsrejserallinclusive.dk
sealgrinderpt.com
g2mediainc.com
singletonfinancial.com
klapanvent.ru
bayshoreelite.com
golfclublandgoednieuwkerk.nl
buzzneakers.com
imagine-entertainment.com
andermattswisswatches.ch
rarefoods.ro
mensemetgesigte.co.za
eos-horlogerie.com
uci-france.fr
smartercashsystem.com
dcc-eu.com
rishigangoly.com
gosouldeep.com
transifer.fr
liveyourheartout.co
rolleepollee.com
iron-mine.ru
alisodentalcare.com
redpebblephotography.com
adaduga.info
amorbellezaysalud.com
cleanroomequipment.ie
belinda.af
mrkluttz.com
curtsdiscountguns.com
2020hindsight.info
xn--billigafrgpatroner-stb.se
fazagostar.co
stressreliefadvice.com
karmeliterviertel.com
p-ride.live
unboxtherapy.site
t3brothers.com
pays-saint-flour.fr
pajagus.fr
fascaonline.com
sweetz.fr
yvesdoin-aquarelles.fr
guohedd.com
itheroes.dk
dentallabor-luenen.de
citydogslife.com
hepishopping.com
lashandbrowenvy.com
boomerslivinglively.com
radishallgood.com
cainlaw-okc.com
bakingismyyoga.com
affligemsehondenschool.be
domilivefurniture.com
qandmmusiccenter.com
globalskills.pt
thisprettyhair.com
mediabolmong.com
adterium.com
banksrl.co.za
advancedeyecare.com
atma.nl
perfectgrin.com
malzomattalar.com
universelle.fr
tanatek.com
belofloripa.be
ikadomus.com
sytzedevries.com
kemtron.fr
oncarrot.com
baikalflot.ru
floweringsun.org
nginx.com
cap29010.it
pinkxgayvideoawards.com
internalresults.com
ledyoucan.com
mursall.de
bcmets.info
narca.net
bodet150ans.com
molade.nl
acornishstudio.co.uk
clemenfoto.dk
goddardleadership.org
blavait.fr
jaaphoekzema.nl
triavlete.com
brinkdoepke.eu
hinotruckwreckers.com.au
janellrardon.com
cl0nazepamblog.com
redctei.co
k-v-f.de
astrographic.com
tzn.nu
zumrutkuyutemel.com
spartamovers.com
graygreenbiomedservices.com
frankgoll.com
o2o-academy.com
acb-gruppe.ch
galatee-couture.com
reputation-medical.online
penumbuhrambutkeiskei.com
nbva.co.uk
acumenconsultingcompany.com
tesisatonarim.com
patriotcleaning.net
sochi-okna23.ru
wasnederland.nl
min-virksomhed.dk
thepixelfairy.com
nevadaruralhousingstudies.org
arthakapitalforvaltning.dk
distrifresh.com
bg.szczecin.pl
acibademmobil.com.tr
a-zpaperwork.eu
palmenhaus-erfurt.de
mazift.dk
colored-shelves.com
rokthetalk.com
martha-frets-ceramics.nl
drnelsonpediatrics.com
bescomedical.de
nexstagefinancial.com
campinglaforetdetesse.com
pxsrl.it
katherinealy.com
sunsolutions.es
thegrinningmanmusical.com
tecleados.com
margaretmcshane.com
nrgvalue.com
noda.com.ua
alene.co
justaroundthecornerpetsit.com
goodboyscustom.com
csaballoons.com
dinecorp.com
90nguyentuan.com
geoweb.software
thesilkroadny.com
mustangmarketinggroup.com
the5thquestion.com
galaniuklaw.com
sycamoregreenapts.com
lunoluno.com
epsondriversforwindows.com
laylavalentine.com
trivselsguide.dk
blueridgeheritage.com
arearugcleaningnyc.com
mariajosediazdemera.com
alabamaroofingllc.com
magrinya.net
elliemaccreative.wordpress.com
mike.matthies.de
cotton-avenue.co.il
vitoriaecoturismo.com.br
gavelmasters.com
customroasts.com
racefietsenblog.nl
nutriwell.com.sg
natturestaurante.com.br
mamajenedesigns.com
oscommunity.de
alnectus.com
kellengatton.com
craftingalegacy.com
mollymccarthydesign.com
hostastay.com
bagaholics.in
secrets-clubs.co.uk
pvandambv.nl
adedesign.com
bjornvanvulpen.nl
georgemuncey.com
johnsonweekly.com
mbuildinghomes.com
lollachiro.com
fla.se
dmlcpa.com
leatherjees.com
mrmac.com
louiedager.com
apiarista.de
angelika-schwarz.com
johnkoen.com
craftron.com
physio-lang.de
corporacionrr.com
scentedlair.com
bratek-immobilien.de
stitch-n-bitch.com
anleggsregisteret.no
lookandseen.com
drbrianhweeks.com
cp-bap.de
insane.agency
nourella.com
traitware.com
benchbiz.com
zealcon.ae
denhaagfoodie.nl
hawthornsretirement.co.uk
hnkns.com
salonlamar.nl
digitale-elite.de
onesynergyinternational.com
monstarrsoccer.com
tradenavigator.ch
mahikuchen.com
fsbforsale.com
crestgood.com
deduktia.fi
landgoedspica.nl
catering.com
triplettabordeaux.fr
verbouwingsdouche.nl
claudiakilian.de
innervisions-id.com
ideamode.com
mac-computer-support-hamburg.de
pourlabretagne.bzh
domaine-des-pothiers.com
eventosvirtualesexitosos.com
tellthebell.website
tramadolhealth.com
azloans.com
muller.nl
mariamalmahdi.com
cascinarosa33.it
albcleaner.fr
patassociation.com
bohrlochversicherung.info
jax-interim-and-projectmanagement.com
hotelturbo.de
epicjapanart.com
livelai.com
cyberpromote.de
ciga-france.fr
akwaba-safaris.com
hospitalitytrainingsolutions.co.uk
lifeinbreaths.com
janasfokus.com
kuriero.pro
fbmagazine.ru
rossomattonecase.it
animation-pro.co.uk
block-optic.com
banukumbak.com
silverbird.dk
fridakids.com
mangimirossana.it
global-migrate.com
9nar.com
apogeeconseils.fr
awaisghauri.com
thehovecounsellingpractice.co.uk
osn.ro
pazarspor.org.tr
web865.com
otpusk.zp.ua
fi-institutionalfunds.com
carmel-york.com
riffenmattgarage.ch
jlgraphisme.fr
hom-frisor.dk
iexpert99.com
gazelle-du-web.com
inewsstar.com
so-sage.fr
valiant-voice.com
thestudio.academy
dierenambulancealkmaar.nl
renehartman.nl
buffdaddyblog.com
queertube.net
onlinemarketingsurgery.co.uk
omnicademy.com
ahgarage.com
loysonbryan.com
qrs-international.com
stage-infirmier.fr
advanced-removals.co.uk
jobstomoveamerica.org
bumbipdeco.site
bourchier.org
comoserescritor.com
dnqa.co.uk
saboboxtel.uk
invela.dk
mayprogulka.ru
spectamarketingdigital.com.br
nalliasmali.net
dantreranch.com
stabilisateur.fr
volta.plus
harleystreetspineclinic.com
jeanmonti.com
endlessrealms.net
rentingwell.com
billscars.net
airvapourbarrier.com
heuvelland-oaze.nl
licensed-public-adjuster.com
tutvracks.com
mediogiro.com.ar
ayudaespiritualtamara.com
kartuindonesia.com
polynine.com
palema.gr
duthler.nl
b3b.ch
chinowarehousespace.com
bringmehope.org
craftstone.co.nz
arazi.eus
mjk.digital
bajova.sk
hartofurniture.com
keyboardjournal.com
aberdeenartwalk.org
teamsegeln.ch
mgimalta.com
der-stempelking.de
sbit.ag
shrinkingplanet.com
motocrossplace.co.uk
expohomes.com
oro.ae
precisetemp.com
etgdogz.de
kerstliedjeszingen.nl
breakluckrecords.com
tatyanakopieva.ru
direitapernambuco.com
billyoart.com
bilius.dk
111firstdelray.com
sprintcoach.com
webforsites.com
jandhpest.com
tilldeeke.de
theintellect.edu.pk
primemarineengineering.com
metallbau-hartmann.eu
dibli.store
catalyseurdetransformation.com
fluzfluzrewards.com
fann.ru
operativadigital.com
sppdstats.com
martinipstudios.com
cmascd.com
happycatering.de
aktivfriskcenter.se
skyboundnutrition.co.uk
happylublog.wordpress.com
fotoslubna.com
scholarquotes.com
ocduiblog.com
sololibrerie.it
reizenmetkinderen.be
simpleitsolutions.ch
smartspeak.com
zorgboerderijravensbosch.nl
lisa-poncon.fr
holocine.de
netadultere.fr
lgiwines.com
jlwilsonbooks.com
buonabitare.com
speiserei-hannover.de
plbinsurance.com
leansupremegarcinia.net
richardkershawwines.co.za
theatre-embellie.fr
fysiotherapierijnmond.nl
hostingbangladesh.net
latteswithleslie.com
marmarabasin.com
oportowebdesign.com
annenymus.com
towelroot.co
finnergo.eu
edrickennedymacfoy.com
theboardroomafrica.com
parseport.com
alexwenzel.de
parisschool.ru
line-x.co.uk
hiddensee-buhne11.de
alltagsrassismus-entknoten.de
thegetawaycollective.com
beauty-traveller.com
phukienbepthanhdat.com
terraflair.de
frameshift.it
grancanariaregional.com
aciscomputers.com
taulunkartano.fi
nepressurecleaning.com
supercarhire.co.uk
richardiv.com
kickittickets.com
bluetenreich-brilon.de
christianscholz.de
legundschiess.de
drvoip.com
husetsanitas.dk
wyreforest.net
look.academy
davedavisphotos.com
rino-gmbh.com
photonag.com
solidhosting.nl
coachpreneuracademy.com
ceocenters.com
birthplacemag.com
loparnille.se
miscbo.it
premiumweb.com.ua:443
dieetuniversiteit.nl
innersurrection.com
alcye.com
cormanmarketing.com
n-newmedia.de
lmmont.sk
stoneridgemontessori.com
andrealuchesi.it
michaelfiegel.com
bundan.com
baptistdistinctives.org
schlagbohrmaschinetests.com
dayenne-styling.nl
efficiencyconsulting.es
pubcon.com
smartworkplaza.com
jag.me
advesa.com
groovedealers.ru
cxcompany.com
selected-minds.de
rhino-storage.co.uk
indiebizadvocates.org
moira-cristescu.com
agora-collectivites.com
casinodepositors.com
dentalcircle.com
therapybusinessacademy.com
gurutechnologies.net
ufovidmag.com
myfbateam.com
orchardbrickwork.com
rvside.com
unexplored.gr
skooppi.fi
nvisionsigns.com
handyman-silkeborg.dk
unislaw-narty.pl
diverfiestas.com.es
switch-made.com
tchernia-conseil.fr
jakubrybak.com
carolynfriedlander.com
advance-refle.com
powershell.su
krishnabrawijaya.com
gaearoyals.com
christopherhannan.com
gbk-tp1.de
scotlandsroute66.co.uk
basindentistry.com
kelsigordon.com
imaginekithomes.co.nz
tweedekansenloket.nl
rivermusic.nl
topvijesti.net
mrcar.nl
eafx.pro
boyfriendsgoal.site
vdolg24.online
ygallerysalonsoho.com:443
pharmeko-group.com
alaskaremote.com
altocontatto.net
ownidentity.com
ronaldhendriks.nl
descargandoprogramas.com
latableacrepes-meaux.fr
kristianboennelykke.dk
publicompserver.de
phoenixcrane.com
stralsund-ansichten.de
designimage.ae
lidkopingsnytt.nu
randyabrown.com
from02pro.com
teethinadaydentalimplants.com
cesep2019.com
achetrabalhos.com
rapid5kloan.org
auberives-sur-vareze.fr
irizar.com
bulyginnikitav.000webhostapp.com
tages-geldvergleich.de
citiscapes-art.com
nationnewsroom.com
pansionatblago.ru
naukaip.ru
sachainchiuk.com
prodentalblue.com
campusescalade.com
imajyuku-sozoku.com
rsidesigns.com
awag-blog.de
greatofficespaces.net
luvinsburger.fr
uncensoredhentaigif.com
aceroprime.com
askstaffing.com
nicksrock.com
levencovka.ru
mesajjongeren.nl
broccolisoep.nl
alharsunindo.com
sveneulberg.de
vvego.com
globalcompliancenews.com
kiraribeaute-nani.com
myplaywin3.com
fotoeditores.com
annida.it
cops4causes.org
fire-space.com
nxtstg.org
weddingceremonieswithtim.com
arabianmice.com
autoteamlast.de
successcolony.com.ng
hvitfeldt.dk
fta-media.com
kombi-dress.com
silkeight.com
bluelakevision.com
chomiksy.net
ilovefullcircle.com
agenceassemble.fr
putzen-reinigen.com
opticahubertruiz.com
abulanov.com
skoczynski.eu
atelierkomon.com
paprikapod.com
ludoil.it
xn--ziinoapte-6ld.ro
interlinkone.com
betterce.com
vapiano.fr
oththukaruva.com
catchup-mag.com
lexced.com
cymru.futbol
charlesfrancis.photos
fskhjalmar.se
andreaskildegaard.dk
delegationhub.com
ravage-webzine.nl
bookingwheel.com
cuadc.org
sambaglow.com
focuskontur.com
centuryvisionglobal.com
subquercy.fr
egpu.fr
wg-heiligenstadt.de
ncn.nl
littlesaints.academy
envomask.com
linkbuilding.life
liverpoolabudhabi.ae
veggienessa.com
pankiss.ru
hutchstyle.co.uk
optigas.com
cardsandloyalty.com
yourhappyevents.fr
welovecustomers.fr
turing.academy
forumsittard.nl
iactechnologies.net
pokemonturkiye.com
piestar.com
campusce.com
factoriareloj.com
bychowo.pl
nauticmarine.dk
energosbit-rp.ru
altitudeboise.com
kompresory-opravy.com
charlottelhanna.com
azerbaycanas.com
factorywizuk.com
mslp.org
newonestop.com
ced-elec.com
matteoruzzaofficial.com
aidanpublishing.co.uk
morgansconsult.com
electricianul.com
relevantonline.eu
pilotgreen.com
thenalpa.com
hotjapaneselesbian.com
pureelements.nl
alattekniksipil.com
skidpiping.de
geitoniatonaggelon.gr
rozmata.com
ncjc.ca
tastevirginia.com
linearete.com
lsngroupe.com
artcase.pl
finsahome.co.uk
ultimatelifesource.com
gsconcretecoatings.com
hm-com.com
yournextshoes.com
werkzeugtrolley.net
purepreprod4.com
rename.kz
rtc24.com
akcadagofis.com
artvark.nl
eyedoctordallas.com
cookinn.nl
zwemofficial.nl
baumfinancialservices.com
parentsandkids.com
11.in.ua
buerocenter-butzbach-werbemittel.de
ingresosextras.online
jollity.hu
four-ways.com
housesofwa.com
opt4cdi.com
dogsunlimitedguide.com
subyard.com
-
net
true
-
pid
28
-
prc
wordpa
winword
sqbcoreservice
sql$
thebat
oracle
excel
xfssvccon
firefox
infopath
dbeng50
synctime
outlook
ocssd
ocomm
tbirdconfig
mspub
powerpnt
steam
agntsvc
encsvc
msaccess
mydesktopqos
mydesktopservice
isqlplussvc
dbsnmp
visio
thunderbird
ocautoupds
onenote
veeam
-
ransom_oneliner
Sir, its just a business. Just read and follow all instructions and you get your data back. Find {EXT}-readme.txt and follow instructions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} -------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
1965
-
svc
sophos
svc$
veeam
backup
sql
altaro
memtas
vss
mepocs
Extracted
C:\Recovery\3y5ici9-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/3624285A159EDA97
http://decryptor.top/3624285A159EDA97
Extracted
C:\Recovery\ox8ft13-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/C8AC981280F35F1C
http://decryptor.top/C8AC981280F35F1C
Targets
-
-
Target
1e13416a37f6abaa3abafc701760fe81_JaffaCakes118
-
Size
165KB
-
MD5
1e13416a37f6abaa3abafc701760fe81
-
SHA1
9b767c6c7aaace08c934f922ff3d9aae056fdb0a
-
SHA256
b46db6bba1f77f8e3378b6f07a789d19500ae7dece3c09c10549a88b04f47867
-
SHA512
ba75d54d07a2b57381d72e626a11f16ec17c6db5bf02ca004b10c8876703478f614596c37e083deaa98a7472efc0441ba2acebc8d57a430d9e0cc3c7c88d833f
-
SSDEEP
3072:eCEq0R0nZ5ys5n4Y9doh7O79siUs/Na5dz7ZVMoJk71fC8:lw02sJPi7O93NqlVMoM
Score10/10-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1