General
-
Target
44e5f6b16ab566006f4d970662afc38e_JaffaCakes118
-
Size
158KB
-
Sample
240515-g9g8hadd62
-
MD5
44e5f6b16ab566006f4d970662afc38e
-
SHA1
67f15baf34ecf32839c441adb55c309bbda173ac
-
SHA256
12096093901347150ac72d6c9c1cbacf4de7d6a51ef1ab4cddc06f85311dd8ab
-
SHA512
f5596ecf863ee98b550b86da3d5e560994dd23827170fec6aaa4dd515ee147d140a24671b35b814303bce4164729ea9d929a4345798997132a7e91aff4c1cf8f
-
SSDEEP
1536:/gAJlgaPladwnfzDcep9O3F7Pbi4eTMluxtXDCntTnICS4AEuzF8gM5iZQ1+mexx:3PwdkzDcC2Lbi4eTMlwDCnuzO/gQw1n
Behavioral task
behavioral1
Sample
44e5f6b16ab566006f4d970662afc38e_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
44e5f6b16ab566006f4d970662afc38e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Extracted
sodinokibi
29
106
turing.academy
alcye.com
profibersan.com
martha-frets-ceramics.nl
casinodepositors.com
omnicademy.com
coachpreneuracademy.com
bubbalucious.com
ownidentity.com
andermattswisswatches.ch
xrresources.com
buffdaddyblog.com
breakluckrecords.com
rolleepollee.com
christianscholz.de
richardkershawwines.co.za
yourcosmicbeing.com
dogsunlimitedguide.com
distrifresh.com
pourlabretagne.bzh
unexplored.gr
forskolinslimeffect.net
nicksrock.com
druktemakersheerenveen.nl
moira-cristescu.com
amco.net.au
innervisions-id.com
mollymccarthydesign.com
aslog.fr
bumbipdeco.site
xn--ziinoapte-6ld.ro
expohomes.com
salonlamar.nl
kenmccallum.com
shortsalemap.com
5thactors.com
specialtyhomeservicesllc.com
boomerslivinglively.com
girlish.ae
gosouldeep.com
cardsandloyalty.com
the-cupboard.co.uk
gaearoyals.com
tzn.nu
johnkoen.com
o2o-academy.com
xn--billigafrgpatroner-stb.se
drvoip.com
naukaip.ru
foerderverein-vatterschule.de
tradenavigator.ch
tanatek.com
frimec-international.es
hawthornsretirement.co.uk
lumturo.academy
buzzneakers.com
onesynergyinternational.com
bonitabeachassociation.com
devus.de
akwaba-safaris.com
agriturismocastagneto.it
epsondriversforwindows.com
mediogiro.com.ar
galaniuklaw.com
sololibrerie.it
fla.se
nationnewsroom.com
endlessrealms.net
skinkeeper.li
tetameble.pl
rizplakatjaya.com
teutoradio.de
akcadagofis.com
paprikapod.com
netadultere.fr
onlinemarketingsurgery.co.uk
aciscomputers.com
saboboxtel.uk
catchup-mag.com
terraflair.de
publicompserver.de
oportowebdesign.com
imajyuku-sozoku.com
pazarspor.org.tr
pays-saint-flour.fr
blucamp.com
loysonbryan.com
annenymus.com
victorvictoria.com
premiumweb.com.ua:443
babysitting-hk.helpergo.co
bd2fly.com
lovcase.com
reizenmetkinderen.be
leloupblanc.gr
leansupremegarcinia.net
mundo-pieces-auto.fr
jlgraphisme.fr
daveystownhouse.com
artcase.pl
muller.nl
bluelakevision.com
peppergreenfarmcatering.com.au
ronaldhendriks.nl
campusce.com
matteoruzzaofficial.com
medicalsupportco.com
kvetymichalovce.sk
optigas.com
smartworkplaza.com
karmeliterviertel.com
purepreprod4.com
bg.szczecin.pl
husetsanitas.dk
housesofwa.com
qwikcoach.com
epicjapanart.com
larchwoodmarketing.com
ivancacu.com
direitapernambuco.com
cp-bap.de
brighthillgroup.com
premier-iowa.com
stagefxinc.com
internestdigital.com
innovationgames-brabant.nl
liepertgrafikweb.at
chainofhopeeurope.eu
rokthetalk.com
neolaiamedispa.com
zealcon.ae
bundan.com
sycamoregreenapts.com
beandrivingschool.com.au
smartmind.net
kickittickets.com
testitjavertailut.net
stringnosis.academy
unislaw-narty.pl
fidelitytitleoregon.com
lashandbrowenvy.com
cops4causes.org
sprintcoach.com
greenrider.nl
rentingwell.com
dreamvoiceclub.org
soncini.ch
satoblog.org
scholarquotes.com
thestudio.academy
citiscapes-art.com
global-migrate.com
tbalp.co.uk
boyfriendsgoal.site
theatre-embellie.fr
yvesdoin-aquarelles.fr
rename.kz
onlinetvgroup.com
energosbit-rp.ru
renehartman.nl
ingresosextras.online
egpu.fr
masecologicos.com
proffteplo.com
dinecorp.com
mediahub.co.nz
fotoslubna.com
k-v-f.de
hvitfeldt.dk
morgansconsult.com
ced-elec.com
ramirezprono.com
marcandy.com
karelinjames.com
trainiumacademy.com
reputation-medical.online
achetrabalhos.com
christopherhannan.com
greatofficespaces.net
amorbellezaysalud.com
primemarineengineering.com
avtoboss163.ru:443
katherinealy.com
ravage-webzine.nl
wirmuessenreden.com
thesilkroadny.com
innersurrection.com
hm-com.com
carmel-york.com
wg-heiligenstadt.de
dibli.store
banksrl.co.za
rvside.com
sarahspics.co.uk
antesacademy.it
cmascd.com
lexced.com
dr-vita.de
volta.plus
ntinasfiloxenia.gr
tweedekansenloket.nl
broccolisoep.nl
fskhjalmar.se
mahikuchen.com
jacquesgarcianoto.com
fann.ru
schulz-moelln.de
marmarabasin.com
mursall.de
successcolony.com.ng
craftron.com
heimdalbygg.no
geoweb.software
nbva.co.uk
apmollerpension.com
silkeight.com
lollachiro.com
simpleitsolutions.ch
malzomattalar.com
bayshoreelite.com
putzen-reinigen.com
parseport.com
janmorgenstern.com
nginx.com
agrifarm.dk
springfieldplumbermo.com
scentedlair.com
alwaysdc.com
dcc-eu.com
fanuli.com.au
aktivfriskcenter.se
pokemonturkiye.com
pubcon.com
biodentify.ai
ninjaki.com
napisat-pismo-gubernatoru.ru:443
adaduga.info
outstandingminialbums.com
cxcompany.com
agora-collectivites.com
dayenne-styling.nl
schlagbohrmaschinetests.com
alltagsrassismus-entknoten.de
mrkluttz.com
activeterroristwarningcompany.com
skidpiping.de
metallbau-hartmann.eu
latableacrepes-meaux.fr
secrets-clubs.co.uk
k-zubki.ru
hensleymarketing.com
ufovidmag.com
5pointpt.com
noda.com.ua
scietech.academy
vapiano.fr
logosindustries.com
liverpoolabudhabi.ae
line-x.co.uk
grancanariaregional.com
nauticmarine.dk
t3brothers.com
suonenjoen.fi
licensed-public-adjuster.com
bcmets.info
explora.nl
piestar.com
margaretmcshane.com
eksperdanismanlik.com
yayasanprimaunggul.org
holocine.de
the-beauty-guides.com
ronielyn.com
lunoluno.com
nxtstg.org
amelielecompte.wordpress.com
schroederschoembs.com
biblica.com
factoriareloj.com
rossomattonecase.it
burg-zelem.de
amyandzac.com
rechtenplicht.be
internalresults.com
kristianboennelykke.dk
triavlete.com
kroophold-sjaelland.dk
scotlandsroute66.co.uk
blavait.fr
markseymourphotography.co.uk
ceocenters.com
carsten.sparen-it.de
mondolandscapes.com
fysiotherapierijnmond.nl
kamin-somnium.de
poems-for-the-soul.ch
oro.ae
blueridgeheritage.com
etgdogz.de
fire-space.com
pvandambv.nl
cap29010.it
raeoflightmusic.com
trevi-vl.ru
johnsonweekly.com
kdbrh.com
tchernia-conseil.fr
ijsselbeton.nl
topautoinsurers.net
stressreliefadvice.com
iexpert99.com
yourhappyevents.fr
cleanroomequipment.ie
mariajosediazdemera.com
kerstliedjeszingen.nl
drnelsonpediatrics.com
gurutechnologies.net
eafx.pro
ledyoucan.com
legundschiess.de
lovetzuchia.com
hom-frisor.dk
jax-interim-and-projectmanagement.com
lyricalduniya.com
kryddersnapsen.dk
customroasts.com
barbaramcfadyenjewelry.com
ykobbqchicken.ca
chris-anne.com
jandhpest.com
chatberlin.de
muni.pe
initconf.com
stanleyqualitysystems.com
belinda.af
reygroup.pt
tothebackofthemoon.com
concontactodirecto.com
birthplacemag.com
pedmanson.com
kuriero.pro
renderbox.ch
heuvelland-oaze.nl
diakonie-weitramsdorf-sesslach.de
clemenfoto.dk
paradigmlandscape.com
the5thquestion.com
laaisterplakky.nl
istantidigitali.com
buerocenter-butzbach-werbemittel.de
strauchs-wanderlust.info
smartercashsystem.com
globalskills.pt
traitware.com
banukumbak.com
perfectgrin.com
chinowarehousespace.com
redctei.co
indiebizadvocates.org
operativadigital.com
teethinadaydentalimplants.com
jdscenter.com
parentsandkids.com
witraz.pl
molade.nl
jalkapuu.net
avisioninthedesert.com
rsidesigns.com
photographycreativity.co.uk
theintellect.edu.pk
maryairbnb.wordpress.com
makingmillionaires.net
profiz.com
sellthewrightway.com
nvisionsigns.com
billyoart.com
cainlaw-okc.com
olry-cloisons.fr
eventosvirtualesexitosos.com
skyboundnutrition.co.uk
tutvracks.com
drbenveniste.com
khtrx.com
gazelle-du-web.com
pajagus.fr
mediabolmong.com
fbmagazine.ru
qandmmusiccenter.com
photonag.com
jobscore.com
shortysspices.com
tieronechic.com
signededenroth.dk
globalcompliancenews.com
auberives-sur-vareze.fr
skooppi.fi
nexstagefinancial.com
circlecitydj.com
airvapourbarrier.com
arearugcleaningnyc.com
90nguyentuan.com
projektparkiet.pl
ahgarage.com
fsbforsale.com
magnetvisual.com
toranjtuition.org
3daywebs.com
nalliasmali.net
natturestaurante.com.br
tastevirginia.com
skolaprome.eu
palmenhaus-erfurt.de
jaaphoekzema.nl
forextimes.ru
vedsegaard.dk
catalyseurdetransformation.com
geitoniatonaggelon.gr
craftingalegacy.com
justaroundthecornerpetsit.com
elex.is
azloans.com
digitale-elite.de
production-stills.co.uk
oraweb.net
annida.it
advesa.com
bridalcave.com
kartuindonesia.com
kookooo.com
lidkopingsnytt.nu
hostingbangladesh.net
jefersonalessandro.com
m2graph.fr
metriplica.academy
log-barn.co.uk
dnqa.co.uk
magrinya.net
eatyoveges.com
oncarrot.com
nrgvalue.com
lifeinbreaths.com
mneti.ru
bychowo.pl
gbk-tp1.de
jlwilsonbooks.com
keuken-prijs.nl
mrmac.com
hoteltantra.com
aheadloftladders.co.uk
kryptos72.com
citydogslife.com
hameghlim.com
cesep2019.com
almamidwifery.com
awag-blog.de
artvark.nl
webforsites.com
wyreforest.net
jag.me
mesajjongeren.nl
frameshift.it
georgemuncey.com
efficiencyconsulting.es
kompresory-opravy.com
sppdstats.com
redpebblephotography.com
startuplive.org
ilovefullcircle.com
ox-home.com
johnstonmingmanning.com
lsngroupe.com
oththukaruva.com
insane.agency
mac-computer-support-hamburg.de
framemyballs.com
animalfood-online.de
mikegoodfellow.co.uk
bodymindchallenger.com
glennverschueren.be
gavelmasters.com
finnergo.eu
advance-refle.com
sveneulberg.de
bcabattoirs.org
jobstomoveamerica.org
queertube.net
sachainchiuk.com
fluzfluzrewards.com
anleggsregisteret.no
michal-s.co.il
valiant-voice.com
ultimatelifesource.com
the3-week-diet.net
rhino-turf.com
bakingismyyoga.com
racefietsenblog.nl
linearete.com
wasnederland.nl
mariannelemenestrel.com
cotton-avenue.co.il
verbouwingsdouche.nl
hypogenforensic.com
relevantonline.eu
craftstone.co.nz
sunsolutions.es
mbuildinghomes.com
thehovecounsellingpractice.co.uk
beauty-traveller.com
imaginekithomes.co.nz
theboardroomafrica.com
pankiss.ru
brannbornfastigheter.se
web865.com
1deals.com
palema.gr
acornishstudio.co.uk
rivermusic.nl
skoczynski.eu
collegetennis.info
skyscanner.ro
ciga-france.fr
endstarvation.com
motocrossplace.co.uk
powershell.su
sber-biznes.com
fi-institutionalfunds.com
delegationhub.com
osn.ro
atrgroup.it
cmeow.com
chatterchatterchatter.com
whoopingcrane.com
towelroot.co
fta-media.com
eos-horlogerie.com
rhino-storage.co.uk
mustangmarketinggroup.com
dentallabor-luenen.de
klapanvent.ru
tages-geldvergleich.de
parisschool.ru
zorgboerderijravensbosch.nl
directique.com
factorywizuk.com
lookandseen.com
comoserescritor.com
humanviruses.org
mensemetgesigte.co.za
devplus.be
edrickennedymacfoy.com
spectamarketingdigital.com.br
newonestop.com
bajova.sk
aberdeenartwalk.org
asiaartgallery.jp
bilius.dk
sharonalbrightdds.com
pro-gamer.pl
cac2040.com
lapponiasafaris.com
singletonfinancial.com
slotenmakerszwijndrecht.nl
opticahubertruiz.com
go.labibini.ch
rishigangoly.com
acibademmobil.com.tr
michaelfiegel.com
shrinkingplanet.com
altitudeboise.com
carolynfriedlander.com
aquacheck.co.za
eshop.design
saint-malo-developpement.fr
focuskontur.com
aceroprime.com
janellrardon.com
graygreenbiomedservices.com
ocduiblog.com
leadforensics.com
11.in.ua
sshomme.com
silverbird.dk
gratiocafeblog.wordpress.com
ya-elka.ru
benchbiz.com
curtsdiscountguns.com
nourella.com
golfclublandgoednieuwkerk.nl
interlinkone.com
encounter-p.net
espaciopolitica.com
theater-lueneburg.de
pisofare.co
thisprettyhair.com
saberconcrete.com
inewsstar.com
buonabitare.com
paardcentraal.nl
selected-minds.de
floweringsun.org
cc-experts.de
jonnyhooley.com
kelsigordon.com
angeleyezstripclub.com
precisetemp.com
myfbateam.com
zdrowieszczecin.pl
triplettagaite.fr
die-immo-agentur.de
mazift.dk
brownswoodblog.com
electricianul.com
ketomealprep.academy
min-virksomhed.dk
letsstopsmoking.co.uk
kiraribeaute-nani.com
maxcube24.com.ua
rapid5kloan.org
awaitspain.com
albcleaner.fr
hawaiisteelbuilding.com
promus.ca
aoyama.ac
voice2biz.com
signamedia.de
dieetuniversiteit.nl
charlesfrancis.photos
test-teleachat.fr
hepishopping.com
eastgrinsteadwingchun.com
donau-guides.eu
fotoeditores.com
domaine-des-pothiers.com
ncn.nl
spacebel.be
centuryvisionglobal.com
c-sprop.com
mrcar.nl
molinum.pt
palmecophilippines.com
circuit-diagramz.com
pharmeko-group.com
louiedager.com
elliemaccreative.wordpress.com
arabianmice.com
linkbuilding.life
descargandoprogramas.com
fazagostar.co
sochi-okna23.ru
dennisverschuur.com
grupoexin10.com
happycatering.de
tramadolhealth.com
guohedd.com
mangimirossana.it
entdoctor-durban.com
bescomedical.de
opt4cdi.com
lgiwines.com
penumbuhrambutkeiskei.com
thepixelfairy.com
bruut.online
levelseven.be
memphishealthandwellness.com
myplaywin3.com
mind2muscle.nl
stralsund-ansichten.de
protoplay.ca
basindentistry.com
stoneridgemontessori.com
berdonllp.com
arazi.eus
mazzaropi.com.br
jayfurnitureco.com
biketruck.de
alnectus.com
ziliak.com
111firstdelray.com
so-sage.fr
andrealuchesi.it
wribrazil.com
letterscan.de
tesisatonarim.com
gardenpartner.pl
bluemarinefoundation.com
sealgrinderpt.com
allinonecampaign.com
o90.dk
quitescorting.com
denhaagfoodie.nl
boloria.de
vitormmcosta.com
aidanpublishing.co.uk
cssp-mediation.org
alene.co
omegamarbella.com
handyman-silkeborg.dk
uci-france.fr
pureelements.nl
livedeveloper.com
ruggestar.ch
orchardbrickwork.com
hotjapaneselesbian.com
bringmehope.org
narca.net
flossmoordental.com
cormanmarketing.com
vvego.com
creohn.de
neonodi.be
rs-danmark.dk
dentourage.com
patassociation.com
mayprogulka.ru
tellthebell.website
suitesartemis.gr
xn--80addfr4ahr.dp.ua
airserviceunlimited.com
anchelor.com
dentalcircle.com
mercadodelrio.com
gsconcretecoatings.com
billigeflybilletter.dk
leijstrom.com
edvestors.org
baptistdistinctives.org
thegetawaycollective.com
loparnille.se
keyboardjournal.com
subyard.com
motocrosshideout.com
smarttourism.academy
rtc24.com
finsahome.co.uk
martinipstudios.com
hekecrm.com
ludoil.it
avis.mantova.it
itheroes.dk
werkzeugtrolley.net
autoteamlast.de
wallflowersandrakes.com
leatherjees.com
groovedealers.ru
clinic-beethovenstrasse-ag.ch
lassocrm.com
sweetz.fr
stabilisateur.fr
awaisghauri.com
mariamalmahdi.com
richardiv.com
docarefoundation.org
acb-gruppe.ch
triplettabordeaux.fr
koncept-m.ru
watchsale.biz
thenalpa.com
bellesiniacademy.org
nepressurecleaning.com
levencovka.ru
schluesseldienste-hannover.de
cookinn.nl
zumrutkuyutemel.com
trivselsguide.dk
monstarrsoccer.com
livelai.com
look.academy
oscommunity.de
goeppinger-teppichreinigung.de
abulanov.com
eurethicsport.eu
alpesiberie.com
speakaudible.com
adedesign.com
voetbalhoogeveen.nl
forumsittard.nl
fridakids.com
iactechnologies.net
adabible.org
eyedoctordallas.com
zinnystar.com
g2mediainc.com
peninggibadan.co.id
bratek-immobilien.de
pansionatblago.ru
oexebusiness.com
bulyginnikitav.000webhostapp.com
evsynthacademy.org
polynine.com
otpusk.zp.ua
denverwynkoopdentist.com
julielusktherapy.com
azerbaycanas.com
yournextshoes.com
xn--80abehgab4ak0ddz.xn--p1ai
richardmaybury.co.uk
alaskaremote.com
utilisacteur.fr
ddmgen.com
malevannye.ru
dantreranch.com
furland.ru
ideamode.com
9nar.com
acumenconsultingcompany.com
ikadomus.com
lattalvor.com
vitoriaecoturismo.com.br
kafkacare.com
lmmont.sk
supercarhire.co.uk
datatri.be
greeneyetattoo.com
weddingceremonieswithtim.com
site.markkit.com.br
manzel.tn
alabamaroofingllc.com
stathmoulis.gr
ncjc.ca
breathebettertolivebetter.com
agenceassemble.fr
rentsportsequip.com
midwestschool.org
pixelhealth.net
gatlinburgcottage.com
baikalflot.ru
p-ride.live
solidhosting.nl
block-optic.com
topvijesti.net
santastoy.store
goddardleadership.org
cascinarosa33.it
landgoedspica.nl
campinglaforetdetesse.com
mieleshopping.it
campusescalade.com
advancedeyecare.com
baita.ac
imagine-entertainment.com
vdolg24.online
fixx-repair.com
alexwenzel.de
randyabrown.com
rubyaudiology.com
phoenixcrane.com
alisodentalcare.com
catering.com
subquercy.fr
haus-landliebe.de
lagschools.ng
deduktia.fi
uncensoredhentaigif.com
funworx.de
xtensifi.com
solutionshosting.co.uk
stitch-n-bitch.com
mgimalta.com
hospitalitytrainingsolutions.co.uk
happylublog.wordpress.com
arthakapitalforvaltning.dk
animation-pro.co.uk
baumfinancialservices.com
taulunkartano.fi
prometeyagro.com.ua
kausette.com
jameswilliamspainting.com
billscars.net
luvbec.com
nepal-pictures.com
four-ways.com
radishallgood.com
bertbutter.nl
spirello.nl
phukienbepthanhdat.com
afbudsrejserallinclusive.dk
dmlcpa.com
metroton.ru
colored-shelves.com
unboxtherapy.site
walterman.es
teamsegeln.ch
patriotcleaning.net
rino-gmbh.com
a-zpaperwork.eu
ayudaespiritualtamara.com
apiarista.de
sjtpo.org
atma.nl
pinthelook.com
stage-infirmier.fr
condormobile.fr
plbinsurance.com
rozmata.com
der-stempelking.de
slotspinner.com
gta-jjb.fr
hartofurniture.com
mamajenedesigns.com
axisoflove.org:443
jeanmonti.com
invela.dk
diverfiestas.com.es
duthler.nl
astrographic.com
irizar.com
universelle.fr
goodherbalhealth.com
ebible.co
bavovrienden.nl
ygallerysalonsoho.com:443
latteswithleslie.com
agencewho-aixenprovence.fr
dinedrinkdetroit.com
from02pro.com
claudiakilian.de
corporacionrr.com
qrs-international.com
rattanwarehouse.co.uk
nieuwsindeklas.be
nutriwell.com.sg
veggienessa.com
lesyeuxbleus.net
glende-pflanzenparadies.de
andreaskildegaard.dk
cl0nazepamblog.com
hinotruckwreckers.com.au
therapybusinessacademy.com
laylavalentine.com
wineandgo.hu
auto-opel.ro
crestgood.com
jmmartinezilustrador.com
brisbaneosteopathic.com.au
zaczytana.com
studionumerik.fr
techybash.com
slideevents.be
iron-mine.ru
hiddensee-buhne11.de
zuerich-umzug.ch
jobkiwi.com.ng
b3b.ch
domilivefurniture.com
jakubrybak.com
professionetata.com
sytzedevries.com
bourchier.org
leopoldineroux.com
computer-place.de
futurenetworking.com
angelsmirrorus.com
mike.matthies.de
nuohous.com
galatee-couture.com
thiagoperez.com
n-newmedia.de
drbrianhweeks.com
frankgoll.com
deziplan.ru
haard-totaal.nl
thegrinningmanmusical.com
apogeeconseils.fr
mslp.org
fascaonline.com
janasfokus.com
agendatwentytwenty.com
vipcarrental.ae
cuadc.org
speiserei-hannover.de
atelierkomon.com
altocontatto.net
sambaglow.com
2020hindsight.info
harleystreetspineclinic.com
alharsunindo.com
betterce.com
bodet150ans.com
cymru.futbol
luvinsburger.fr
tilldeeke.de
nevadaruralhousingstudies.org
mjk.digital
hostastay.com
elitkeramika-shop.com.ua
nykfdyrehospital.dk
rarefoods.ro
charlottelhanna.com
juergenblaetz.de
jimprattmediations.com
tatyanakopieva.ru
liveyourheartout.co
wademurray.com
belofloripa.be
placermonticello.com
texanscan.org
perceptdecor.com
welovecustomers.fr
brunoimmobilier.com
miscbo.it
goodboyscustom.com
enactusnhlstenden.com
mindsparkescape.com
bagaholics.in
brinkdoepke.eu
affligemsehondenschool.be
bendel-partner.de
krishnabrawijaya.com
wrinstitute.org
bookingwheel.com
metcalfe.ca
business-basic.de
hutchstyle.co.uk
grafikstudio-visuell.de
riffenmattgarage.ch
glas-kuck.de
hostaletdelsindians.es
bjornvanvulpen.nl
yuanshenghotel.com
jglconsultancy.com
worldproskitour.com
limmortelyouth.com
transifer.fr
designimage.ae
askstaffing.com
chorusconsulting.net
advanced-removals.co.uk
dierenambulancealkmaar.nl
bmw-i-pure-impulse.com
ikzoekgod.be
modamarfil.com
bohrlochversicherung.info
pilotgreen.com
angelika-schwarz.com
wordpress.idium.no
littlesaints.academy
jollity.hu
adterium.com
matthieupetel.fr
mindfuelers.com
hotelturbo.de
kosten-vochtbestrijding.be
cyberpromote.de
ilveshistoria.com
smartspeak.com
lisa-poncon.fr
hnkns.com
physio-lang.de
spartamovers.com
easydental.ae
kombi-dress.com
parksideseniorliving.net
limounie.com
csaballoons.com
kellengatton.com
envomask.com
davedavisphotos.com
fitnessblenderstory.com
augen-praxisklinik-rostock.de
pinkxgayvideoawards.com
alattekniksipil.com
bluetenreich-brilon.de
cincinnatiphotocompany.org
sbit.ag
enews-qca.com
zwemofficial.nl
pxsrl.it
kemtron.fr
chomiksy.net
prodentalblue.com
soundseeing.net
tecleados.com
switch-made.com
-
net
true
-
pid
29
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions Good Luck
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on you computer has expansion {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
106
Extracted
C:\Users\v160g73-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/0A053683E59C34E1
http://decryptor.top/0A053683E59C34E1
Extracted
C:\Users\aitp3l-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/7384B9686CE87DC7
http://decryptor.top/7384B9686CE87DC7
Targets
-
-
Target
44e5f6b16ab566006f4d970662afc38e_JaffaCakes118
-
Size
158KB
-
MD5
44e5f6b16ab566006f4d970662afc38e
-
SHA1
67f15baf34ecf32839c441adb55c309bbda173ac
-
SHA256
12096093901347150ac72d6c9c1cbacf4de7d6a51ef1ab4cddc06f85311dd8ab
-
SHA512
f5596ecf863ee98b550b86da3d5e560994dd23827170fec6aaa4dd515ee147d140a24671b35b814303bce4164729ea9d929a4345798997132a7e91aff4c1cf8f
-
SSDEEP
1536:/gAJlgaPladwnfzDcep9O3F7Pbi4eTMluxtXDCntTnICS4AEuzF8gM5iZQ1+mexx:3PwdkzDcC2Lbi4eTMlwDCnuzO/gQw1n
-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Renames multiple (1113) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-