General
-
Target
612b61376219736601d49d2001645b30_JaffaCakes118
-
Size
164KB
-
Sample
240520-2l7tgaaa65
-
MD5
612b61376219736601d49d2001645b30
-
SHA1
86840cdd42c8aec339575a1d0e3fc784d3ad445c
-
SHA256
008d0c1a4e83a37d34c14993a6d76c18ae13c03ba54d12e1246fb1495a20e2a6
-
SHA512
1c48f5fba28504ae7e176053cf4ea127fb763e16aed7a34ee002a541072903e0fbf55f5090069da776030e0b153474948deced137d1b71152ac20adb7e15e728
-
SSDEEP
3072:v0XoUeZ/DVS8L73ea4MoCLfqQvFfamVw3O1:veoUeZR2TRCWQFfamme
Behavioral task
behavioral1
Sample
612b61376219736601d49d2001645b30_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
612b61376219736601d49d2001645b30_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Extracted
sodinokibi
28
1819
enactusnhlstenden.com
ludoil.it
vedsegaard.dk
donau-guides.eu
hnkns.com
veggienessa.com
stathmoulis.gr
volta.plus
ced-elec.com
sealgrinderpt.com
shrinkingplanet.com
spirello.nl
catalyseurdetransformation.com
bruut.online
customroasts.com
precisetemp.com
ruggestar.ch
nexstagefinancial.com
mariamalmahdi.com
vitoriaecoturismo.com.br
irizar.com
oexebusiness.com
jalkapuu.net
adaduga.info
newonestop.com
ayudaespiritualtamara.com
mneti.ru
alene.co
springfieldplumbermo.com
campusce.com
boomerslivinglively.com
ncn.nl
omegamarbella.com
awaitspain.com
rozmata.com
futurenetworking.com
molade.nl
angeleyezstripclub.com
alharsunindo.com
basindentistry.com
bumbipdeco.site
nginx.com
gratiocafeblog.wordpress.com
tzn.nu
aheadloftladders.co.uk
endstarvation.com
internalresults.com
foerderverein-vatterschule.de
5pointpt.com
startuplive.org
pubcon.com
perceptdecor.com
alisodentalcare.com
min-virksomhed.dk
thegetawaycollective.com
bilius.dk
campusescalade.com
miscbo.it
putzen-reinigen.com
mazift.dk
apogeeconseils.fr
loysonbryan.com
dennisverschuur.com
testitjavertailut.net
logosindustries.com
teethinadaydentalimplants.com
tothebackofthemoon.com
xtensifi.com
sycamoregreenapts.com
matteoruzzaofficial.com
factoriareloj.com
curtsdiscountguns.com
christianscholz.de
belinda.af
signededenroth.dk
onesynergyinternational.com
hartofurniture.com
lexced.com
domaine-des-pothiers.com
lagschools.ng
apiarista.de
heuvelland-oaze.nl
airserviceunlimited.com
kenmccallum.com
cuadc.org
theater-lueneburg.de
askstaffing.com
concontactodirecto.com
antesacademy.it
vapiano.fr
noda.com.ua
kiraribeaute-nani.com
palmecophilippines.com
scietech.academy
leloupblanc.gr
renehartman.nl
focuskontur.com
bmw-i-pure-impulse.com
jlwilsonbooks.com
latteswithleslie.com
goeppinger-teppichreinigung.de
shortsalemap.com
indiebizadvocates.org
pourlabretagne.bzh
der-stempelking.de
mollymccarthydesign.com
premier-iowa.com
eventosvirtualesexitosos.com
whoopingcrane.com
pvandambv.nl
citydogslife.com
hotjapaneselesbian.com
markseymourphotography.co.uk
energosbit-rp.ru
stoneridgemontessori.com
drbenveniste.com
leopoldineroux.com
corporacionrr.com
belofloripa.be
suonenjoen.fi
csaballoons.com
martinipstudios.com
claudiakilian.de
housesofwa.com
invela.dk
aquacheck.co.za
funworx.de
fla.se
sochi-okna23.ru
ketomealprep.academy
billyoart.com
littlesaints.academy
saberconcrete.com
fazagostar.co
switch-made.com
limounie.com
unexplored.gr
groovedealers.ru
perfectgrin.com
neonodi.be
sjtpo.org
nepressurecleaning.com
nationnewsroom.com
go.labibini.ch
outstandingminialbums.com
galatee-couture.com
humanviruses.org
eastgrinsteadwingchun.com
trainiumacademy.com
alaskaremote.com
adabible.org
nourella.com
latableacrepes-meaux.fr
fysiotherapierijnmond.nl
proffteplo.com
jayfurnitureco.com
koncept-m.ru
amco.net.au
unboxtherapy.site
entdoctor-durban.com
distrifresh.com
expohomes.com
skooppi.fi
mrmac.com
rhino-storage.co.uk
mjk.digital
slotspinner.com
bellesiniacademy.org
rubyaudiology.com
apmollerpension.com
nutriwell.com.sg
11.in.ua
bonitabeachassociation.com
saboboxtel.uk
dmlcpa.com
encounter-p.net
vdolg24.online
chatterchatterchatter.com
framemyballs.com
iactechnologies.net
molinum.pt
cap29010.it
aceroprime.com
projektparkiet.pl
cssp-mediation.org
rvside.com
jandhpest.com
scholarquotes.com
enews-qca.com
sber-biznes.com
piestar.com
stitch-n-bitch.com
grancanariaregional.com
paprikapod.com
circuit-diagramz.com
mindsparkescape.com
rs-danmark.dk
lesyeuxbleus.net
3daywebs.com
jobkiwi.com.ng
arabianmice.com
rechtenplicht.be
anleggsregisteret.no
craftingalegacy.com
michaelfiegel.com
hawaiisteelbuilding.com
fitnessblenderstory.com
dr-vita.de
natturestaurante.com.br
racefietsenblog.nl
silverbird.dk
liepertgrafikweb.at
ikzoekgod.be
breakluckrecords.com
frankgoll.com
therapybusinessacademy.com
skyboundnutrition.co.uk
atma.nl
line-x.co.uk
bodet150ans.com
rattanwarehouse.co.uk
karmeliterviertel.com
orchardbrickwork.com
pixelhealth.net
thepixelfairy.com
yayasanprimaunggul.org
ziliak.com
globalcompliancenews.com
hostingbangladesh.net
evsynthacademy.org
dentalcircle.com
ufovidmag.com
girlish.ae
khtrx.com
redpebblephotography.com
osn.ro
pedmanson.com
zorgboerderijravensbosch.nl
sololibrerie.it
vipcarrental.ae
zumrutkuyutemel.com
renderbox.ch
tradenavigator.ch
zinnystar.com
afbudsrejserallinclusive.dk
dierenambulancealkmaar.nl
internestdigital.com
atelierkomon.com
bookingwheel.com
baptistdistinctives.org
sambaglow.com
grupoexin10.com
betterce.com
placermonticello.com
narca.net
fann.ru
gatlinburgcottage.com
bratek-immobilien.de
thisprettyhair.com
bajova.sk
kompresory-opravy.com
dibli.store
forumsittard.nl
denverwynkoopdentist.com
drvoip.com
delegationhub.com
site.markkit.com.br
mensemetgesigte.co.za
forextimes.ru
pazarspor.org.tr
hameghlim.com
tatyanakopieva.ru
kickittickets.com
quitescorting.com
ultimatelifesource.com
diakonie-weitramsdorf-sesslach.de
tetameble.pl
inewsstar.com
cascinarosa33.it
wrinstitute.org
marmarabasin.com
dentourage.com
altocontatto.net
rename.kz
smartercashsystem.com
lollachiro.com
crestgood.com
wribrazil.com
nrgvalue.com
craftron.com
ownidentity.com
saint-malo-developpement.fr
tesisatonarim.com
innovationgames-brabant.nl
cyberpromote.de
catchup-mag.com
mrcar.nl
cotton-avenue.co.il
paardcentraal.nl
parseport.com
fixx-repair.com
motocrosshideout.com
web865.com
finnergo.eu
etgdogz.de
lassocrm.com
solidhosting.nl
atrgroup.it
oro.ae
azerbaycanas.com
rishigangoly.com
the-cupboard.co.uk
voetbalhoogeveen.nl
bodymindchallenger.com
mrkluttz.com
handyman-silkeborg.dk
witraz.pl
maryairbnb.wordpress.com
kamin-somnium.de
powershell.su
haus-landliebe.de
wineandgo.hu
domilivefurniture.com
hostaletdelsindians.es
keyboardjournal.com
buffdaddyblog.com
mondolandscapes.com
bohrlochversicherung.info
linearete.com
mieleshopping.it
qrs-international.com
theatre-embellie.fr
wyreforest.net
skinkeeper.li
ebible.co
hospitalitytrainingsolutions.co.uk
photonag.com
eurethicsport.eu
brunoimmobilier.com
xn--billigafrgpatroner-stb.se
andermattswisswatches.ch
imajyuku-sozoku.com
anchelor.com
gardenpartner.pl
thestudio.academy
activeterroristwarningcompany.com
alexwenzel.de
kryddersnapsen.dk
fotoslubna.com
jimprattmediations.com
loparnille.se
ahgarage.com
subyard.com
gavelmasters.com
kelsigordon.com
texanscan.org
johnkoen.com
cookinn.nl
lgiwines.com
envomask.com
husetsanitas.dk
rolleepollee.com
log-barn.co.uk
stralsund-ansichten.de
tanatek.com
mediogiro.com.ar
zealcon.ae
prometeyagro.com.ua
aidanpublishing.co.uk
slotenmakerszwijndrecht.nl
almamidwifery.com
artcase.pl
michal-s.co.il
nxtstg.org
four-ways.com
singletonfinancial.com
ninjaki.com
istantidigitali.com
hensleymarketing.com
o2o-academy.com
physio-lang.de
frimec-international.es
relevantonline.eu
trevi-vl.ru
bagaholics.in
aberdeenartwalk.org
operativadigital.com
stabilisateur.fr
jdscenter.com
palmenhaus-erfurt.de
campinglaforetdetesse.com
agendatwentytwenty.com
kvetymichalovce.sk
teutoradio.de
animation-pro.co.uk
kerstliedjeszingen.nl
deduktia.fi
eksperdanismanlik.com
stagefxinc.com
acibademmobil.com.tr
ronaldhendriks.nl
purepreprod4.com
bertbutter.nl
vitormmcosta.com
fi-institutionalfunds.com
tbalp.co.uk
blueridgeheritage.com
ox-home.com
pays-saint-flour.fr
mesajjongeren.nl
cops4causes.org
trivselsguide.dk
direitapernambuco.com
xn--80addfr4ahr.dp.ua
schroederschoembs.com
animalfood-online.de
tweedekansenloket.nl
floweringsun.org
ideamode.com
efficiencyconsulting.es
bd2fly.com
lovcase.com
bulyginnikitav.000webhostapp.com
jag.me
wallflowersandrakes.com
axisoflove.org:443
docarefoundation.org
reputation-medical.online
ilveshistoria.com
hinotruckwreckers.com.au
t3brothers.com
berdonllp.com
happylublog.wordpress.com
oththukaruva.com
fskhjalmar.se
fbmagazine.ru
ijsselbeton.nl
omnicademy.com
morgansconsult.com
dreamvoiceclub.org
thehovecounsellingpractice.co.uk
davedavisphotos.com
wirmuessenreden.com
zwemofficial.nl
advanced-removals.co.uk
successcolony.com.ng
baikalflot.ru
lifeinbreaths.com
luvinsburger.fr
mindfuelers.com
lapponiasafaris.com
tecleados.com
sharonalbrightdds.com
annida.it
topvijesti.net
kdbrh.com
livedeveloper.com
queertube.net
goodherbalhealth.com
margaretmcshane.com
p-ride.live
shortysspices.com
tages-geldvergleich.de
sweetz.fr
rivermusic.nl
laaisterplakky.nl
carmel-york.com
spacebel.be
guohedd.com
simpleitsolutions.ch
mercadodelrio.com
ramirezprono.com
golfclublandgoednieuwkerk.nl
sarahspics.co.uk
advancedeyecare.com
zuerich-umzug.ch
profiz.com
midwestschool.org
bavovrienden.nl
opticahubertruiz.com
santastoy.store
jobscore.com
creohn.de
bringmehope.org
rentsportsequip.com
o90.dk
avis.mantova.it
livelai.com
chris-anne.com
b3b.ch
wordpress.idium.no
catering.com
aoyama.ac
5thactors.com
justaroundthecornerpetsit.com
greenrider.nl
protoplay.ca
skidpiping.de
mike.matthies.de
pinkxgayvideoawards.com
metcalfe.ca
kafkacare.com
professionetata.com
carsten.sparen-it.de
skyscanner.ro
grafikstudio-visuell.de
welovecustomers.fr
auberives-sur-vareze.fr
gaearoyals.com
thenalpa.com
eos-horlogerie.com
arazi.eus
radishallgood.com
oraweb.net
tramadolhealth.com
banksrl.co.za
scentedlair.com
kombi-dress.com
agrifarm.dk
eafx.pro
glende-pflanzenparadies.de
liverpoolabudhabi.ae
theboardroomafrica.com
tieronechic.com
sprintcoach.com
smarttourism.academy
biblica.com
bluetenreich-brilon.de
penumbuhrambutkeiskei.com
beandrivingschool.com.au
lmmont.sk
greatofficespaces.net
monstarrsoccer.com
napisat-pismo-gubernatoru.ru:443
liveyourheartout.co
mikegoodfellow.co.uk
awaisghauri.com
neolaiamedispa.com
block-optic.com
janellrardon.com
g2mediainc.com
pajagus.fr
initconf.com
bakingismyyoga.com
yourhappyevents.fr
jollity.hu
kookooo.com
hypogenforensic.com
olry-cloisons.fr
oncarrot.com
gta-jjb.fr
hutchstyle.co.uk
mediabolmong.com
haard-totaal.nl
babysitting-hk.helpergo.co
polynine.com
heimdalbygg.no
onlinemarketingsurgery.co.uk
tutvracks.com
nalliasmali.net
oportowebdesign.com
ikadomus.com
akwaba-safaris.com
billigeflybilletter.dk
lumturo.academy
schluesseldienste-hannover.de
andreaskildegaard.dk
alpesiberie.com
jeanmonti.com
bg.szczecin.pl
brighthillgroup.com
jax-interim-and-projectmanagement.com
global-migrate.com
1deals.com
sshomme.com
ivancacu.com
glas-kuck.de
magnetvisual.com
innervisions-id.com
bcmets.info
holocine.de
dnqa.co.uk
greeneyetattoo.com
parksideseniorliving.net
mustangmarketinggroup.com
lovetzuchia.com
mac-computer-support-hamburg.de
cxcompany.com
ykobbqchicken.ca
soundseeing.net
dentallabor-luenen.de
triavlete.com
casinodepositors.com
dantreranch.com
the5thquestion.com
globalskills.pt
mbuildinghomes.com
dogsunlimitedguide.com
kartuindonesia.com
makingmillionaires.net
johnstonmingmanning.com
signamedia.de
adedesign.com
rokthetalk.com
salonlamar.nl
phukienbepthanhdat.com
cmascd.com
cormanmarketing.com
ygallerysalonsoho.com:443
watchsale.biz
finsahome.co.uk
agora-collectivites.com
matthieupetel.fr
sellthewrightway.com
primemarineengineering.com
qandmmusiccenter.com
triplettagaite.fr
lookandseen.com
azloans.com
letsstopsmoking.co.uk
janmorgenstern.com
bescomedical.de
georgemuncey.com
kroophold-sjaelland.dk
rino-gmbh.com
rtc24.com
hom-frisor.dk
gurutechnologies.net
lisa-poncon.fr
malevannye.ru
randyabrown.com
strauchs-wanderlust.info
ocduiblog.com
towelroot.co
affligemsehondenschool.be
limmortelyouth.com
denhaagfoodie.nl
awag-blog.de
zaczytana.com
yuanshenghotel.com
alnectus.com
supercarhire.co.uk
photographycreativity.co.uk
bcabattoirs.org
nicksrock.com
burg-zelem.de
moira-cristescu.com
chainofhopeeurope.eu
test-teleachat.fr
sbit.ag
sachainchiuk.com
rapid5kloan.org
iexpert99.com
albcleaner.fr
laylavalentine.com
kosten-vochtbestrijding.be
uncensoredhentaigif.com
rentingwell.com
hostastay.com
drnelsonpediatrics.com
ravage-webzine.nl
hoteltantra.com
klapanvent.ru
verbouwingsdouche.nl
stringnosis.academy
leansupremegarcinia.net
ntinasfiloxenia.gr
buonabitare.com
motocrossplace.co.uk
benchbiz.com
topautoinsurers.net
devplus.be
levelseven.be
carolynfriedlander.com
smartmind.net
9nar.com
m2graph.fr
diverfiestas.com.es
silkeight.com
pilotgreen.com
rarefoods.ro
richardmaybury.co.uk
parentsandkids.com
biodentify.ai
condormobile.fr
voice2biz.com
geitoniatonaggelon.gr
blucamp.com
cainlaw-okc.com
mgimalta.com
agenceassemble.fr
cesep2019.com
richardiv.com
ilovefullcircle.com
pharmeko-group.com
mariajosediazdemera.com
christopherhannan.com
mundo-pieces-auto.fr
poems-for-the-soul.ch
production-stills.co.uk
rossomattonecase.it
peppergreenfarmcatering.com.au
arearugcleaningnyc.com
victorvictoria.com
elliemaccreative.wordpress.com
thegrinningmanmusical.com
the3-week-diet.net
buzzneakers.com
galaniuklaw.com
traitware.com
bundan.com
eyedoctordallas.com
baumfinancialservices.com
business-basic.de
satoblog.org
descargandoprogramas.com
spectamarketingdigital.com.br
legundschiess.de
smartworkplaza.com
banukumbak.com
collegetennis.info
altitudeboise.com
abulanov.com
bayshoreelite.com
the-beauty-guides.com
parisschool.ru
boloria.de
computer-place.de
smartspeak.com
skolaprome.eu
cac2040.com
gosouldeep.com
schlagbohrmaschinetests.com
riffenmattgarage.ch
stressreliefadvice.com
barbaramcfadyenjewelry.com
opt4cdi.com
cl0nazepamblog.com
cymru.futbol
spartamovers.com
espaciopolitica.com
lidkopingsnytt.nu
suitesartemis.gr
jlgraphisme.fr
taulunkartano.fi
digitale-elite.de
pankiss.ru
metriplica.academy
adterium.com
paradigmlandscape.com
manzel.tn
techybash.com
edrickennedymacfoy.com
amelielecompte.wordpress.com
kryptos72.com
broccolisoep.nl
memphishealthandwellness.com
gsconcretecoatings.com
mslp.org
agriturismocastagneto.it
mazzaropi.com.br
jacquesgarcianoto.com
pisofare.co
acumenconsultingcompany.com
jmmartinezilustrador.com
terraflair.de
xn--ziinoapte-6ld.ro
ceocenters.com
keuken-prijs.nl
nvisionsigns.com
alltagsrassismus-entknoten.de
slideevents.be
kristianboennelykke.dk
teamsegeln.ch
schulz-moelln.de
fotoeditores.com
speiserei-hannover.de
sveneulberg.de
beauty-traveller.com
mamajenedesigns.com
zdrowieszczecin.pl
landgoedspica.nl
juergenblaetz.de
reizenmetkinderen.be
fsbforsale.com
redctei.co
datatri.be
edvestors.org
hepishopping.com
breathebettertolivebetter.com
jaaphoekzema.nl
solutionshosting.co.uk
advesa.com
imagine-entertainment.com
otpusk.zp.ua
modamarfil.com
centuryvisionglobal.com
malzomattalar.com
chinowarehousespace.com
profibersan.com
xrresources.com
katherinealy.com
auto-opel.ro
advance-refle.com
astrographic.com
cincinnatiphotocompany.org
annenymus.com
eshop.design
augen-praxisklinik-rostock.de
martha-frets-ceramics.nl
achetrabalhos.com
glennverschueren.be
oscommunity.de
furland.ru
amyandzac.com
mediahub.co.nz
alabamaroofingllc.com
chomiksy.net
larchwoodmarketing.com
nuohous.com
designimage.ae
factorywizuk.com
baita.ac
craftstone.co.nz
premiumweb.com.ua:443
charlesfrancis.photos
ncjc.ca
cc-experts.de
amorbellezaysalud.com
2020hindsight.info
yournextshoes.com
hiddensee-buhne11.de
n-newmedia.de
yourcosmicbeing.com
bendel-partner.de
fridakids.com
prodentalblue.com
coachpreneuracademy.com
mangimirossana.it
drbrianhweeks.com
bluelakevision.com
comoserescritor.com
selected-minds.de
itheroes.dk
hm-com.com
goddardleadership.org
plbinsurance.com
patriotcleaning.net
look.academy
wademurray.com
brownswoodblog.com
kemtron.fr
hekecrm.com
specialtyhomeservicesllc.com
hawthornsretirement.co.uk
ya-elka.ru
metroton.ru
nykfdyrehospital.dk
pokemonturkiye.com
lyricalduniya.com
wasnederland.nl
arthakapitalforvaltning.dk
nepal-pictures.com
julielusktherapy.com
valiant-voice.com
soncini.ch
geoweb.software
dinecorp.com
die-immo-agentur.de
so-sage.fr
turing.academy
citiscapes-art.com
bubbalucious.com
studionumerik.fr
yvesdoin-aquarelles.fr
daveystownhouse.com
endlessrealms.net
boyfriendsgoal.site
eatyoveges.com
bjornvanvulpen.nl
easydental.ae
gazelle-du-web.com
levencovka.ru
biketruck.de
qwikcoach.com
myfbateam.com
devus.de
reygroup.pt
cp-bap.de
raeoflightmusic.com
birthplacemag.com
sunsolutions.es
bourchier.org
mariannelemenestrel.com
jakubrybak.com
pansionatblago.ru
medicalsupportco.com
krishnabrawijaya.com
skoczynski.eu
k-v-f.de
linkbuilding.life
brannbornfastigheter.se
cmeow.com
lattalvor.com
palema.gr
wg-heiligenstadt.de
sytzedevries.com
hvitfeldt.dk
bluemarinefoundation.com
speakaudible.com
ddmgen.com
chatberlin.de
aciscomputers.com
alattekniksipil.com
transifer.fr
allinonecampaign.com
autoteamlast.de
promus.ca
leatherjees.com
aktivfriskcenter.se
louiedager.com
innersurrection.com
dayenne-styling.nl
dieetuniversiteit.nl
frameshift.it
iron-mine.ru
epsondriversforwindows.com
richardkershawwines.co.za
brisbaneosteopathic.com.au
blavait.fr
tellthebell.website
akcadagofis.com
myplaywin3.com
weddingceremonieswithtim.com
imaginekithomes.co.nz
optigas.com
goodboyscustom.com
alcye.com
stage-infirmier.fr
acornishstudio.co.uk
maxcube24.com.ua
patassociation.com
kellengatton.com
mind2muscle.nl
epicjapanart.com
asiaartgallery.jp
111firstdelray.com
clemenfoto.dk
explora.nl
dcc-eu.com
avisioninthedesert.com
hotelturbo.de
elex.is
buerocenter-butzbach-werbemittel.de
duthler.nl
muni.pe
ledyoucan.com
lashandbrowenvy.com
tastevirginia.com
lunoluno.com
utilisacteur.fr
thiagoperez.com
fidelitytitleoregon.com
from02pro.com
lsngroupe.com
pxsrl.it
luvbec.com
marcandy.com
ciga-france.fr
harleystreetspineclinic.com
gbk-tp1.de
jobstomoveamerica.org
angelika-schwarz.com
muller.nl
jglconsultancy.com
a-zpaperwork.eu
nevadaruralhousingstudies.org
acb-gruppe.ch
licensed-public-adjuster.com
uci-france.fr
90nguyentuan.com
aslog.fr
egpu.fr
artvark.nl
fluzfluzrewards.com
chorusconsulting.net
deziplan.ru
pureelements.nl
unislaw-narty.pl
secrets-clubs.co.uk
pro-gamer.pl
tchernia-conseil.fr
fta-media.com
k-zubki.ru
charlottelhanna.com
vvego.com
nieuwsindeklas.be
rizplakatjaya.com
c-sprop.com
fascaonline.com
colored-shelves.com
fire-space.com
cleanroomequipment.ie
mayprogulka.ru
graygreenbiomedservices.com
jameswilliamspainting.com
airvapourbarrier.com
dinedrinkdetroit.com
bridalcave.com
kausette.com
johnsonweekly.com
onlinetvgroup.com
mursall.de
bychowo.pl
subquercy.fr
theintellect.edu.pk
toranjtuition.org
tilldeeke.de
brinkdoepke.eu
kuriero.pro
agencewho-aixenprovence.fr
rsidesigns.com
xn--80abehgab4ak0ddz.xn--p1ai
letterscan.de
pinthelook.com
universelle.fr
metallbau-hartmann.eu
circlecitydj.com
netadultere.fr
alwaysdc.com
publicompserver.de
cardsandloyalty.com
nbva.co.uk
naukaip.ru
webforsites.com
electricianul.com
magrinya.net
jefersonalessandro.com
avtoboss163.ru:443
triplettabordeaux.fr
thesilkroadny.com
peninggibadan.co.id
forskolinslimeffect.net
druktemakersheerenveen.nl
ronielyn.com
flossmoordental.com
billscars.net
janasfokus.com
phoenixcrane.com
sppdstats.com
fanuli.com.au
insane.agency
directique.com
elitkeramika-shop.com.ua
nauticmarine.dk
stanleyqualitysystems.com
happycatering.de
ingresosextras.online
karelinjames.com
clinic-beethovenstrasse-ag.ch
walterman.es
worldproskitour.com
interlinkone.com
scotlandsroute66.co.uk
angelsmirrorus.com
masecologicos.com
rhino-turf.com
werkzeugtrolley.net
leadforensics.com
leijstrom.com
mahikuchen.com
andrealuchesi.it
jonnyhooley.com
-
net
true
-
pid
28
-
prc
msaccess
ocautoupds
mydesktopqos
onenote
firefox
excel
isqlplussvc
xfssvccon
outlook
powerpnt
wordpa
mspub
dbeng50
sqbcoreservice
steam
encsvc
infopath
ocomm
winword
tbirdconfig
visio
oracle
synctime
mydesktopservice
sql
agntsvc
dbsnmp
thunderbird
ocssd
thebat
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.cc/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
1819
-
svc
veeam
svc$
sql
vss
backup
mepocs
sophos
memtas
Extracted
C:\Users\28y7qg1913-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/5356259464F878BE
http://decryptor.cc/5356259464F878BE
Extracted
C:\Users\84ek0d86g4-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/F2FBA71BB1DAF38F
http://decryptor.cc/F2FBA71BB1DAF38F
Targets
-
-
Target
612b61376219736601d49d2001645b30_JaffaCakes118
-
Size
164KB
-
MD5
612b61376219736601d49d2001645b30
-
SHA1
86840cdd42c8aec339575a1d0e3fc784d3ad445c
-
SHA256
008d0c1a4e83a37d34c14993a6d76c18ae13c03ba54d12e1246fb1495a20e2a6
-
SHA512
1c48f5fba28504ae7e176053cf4ea127fb763e16aed7a34ee002a541072903e0fbf55f5090069da776030e0b153474948deced137d1b71152ac20adb7e15e728
-
SSDEEP
3072:v0XoUeZ/DVS8L73ea4MoCLfqQvFfamVw3O1:veoUeZR2TRCWQFfamme
Score10/10-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-