Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
619bcc16546e3d7ddea8045fa88f65fc_JaffaCakes118
-
Size
157KB
-
Sample
240521-bv4v3adg67
-
MD5
619bcc16546e3d7ddea8045fa88f65fc
-
SHA1
bab813d5a45552978bba9a413089222c3f225a6c
-
SHA256
5fe8e804cc0e7d211019bf37dbb18e4a00af24be11cc9407fac6d648c01716fb
-
SHA512
22997dc1a27b3ee620ab248336dd7a373d7a5217c30135a36943555e605ae7ea81fe55b5c0b596bc14748831144ae91b4272dd6a319cc3d69bea2fa7caccdded
-
SSDEEP
3072:Fi8Iy8EytSLbi4eTMlwDCnuZ3jmOaqGpeT3:U8IUykbnWJZ3jmOaqFT3
Behavioral task
behavioral1
Sample
619bcc16546e3d7ddea8045fa88f65fc_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
619bcc16546e3d7ddea8045fa88f65fc_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
sodinokibi
8
10
fbmagazine.ru
palmenhaus-erfurt.de
jacquesgarcianoto.com
vapiano.fr
pureelements.nl
efficiencyconsulting.es
schroederschoembs.com
wallflowersandrakes.com
irizar.com
kiraribeaute-nani.com
ketomealprep.academy
imaginekithomes.co.nz
andermattswisswatches.ch
imagine-entertainment.com
rhino-turf.com
the-beauty-guides.com
adedesign.com
phukienbepthanhdat.com
smartworkplaza.com
chatterchatterchatter.com
galaniuklaw.com
photographycreativity.co.uk
o90.dk
yayasanprimaunggul.org
drvoip.com
naukaip.ru
craftstone.co.nz
piestar.com
banksrl.co.za
matteoruzzaofficial.com
sshomme.com
jeanmonti.com
scietech.academy
charlottelhanna.com
rentsportsequip.com
azloans.com
tanatek.com
towelroot.co
arthakapitalforvaltning.dk
studionumerik.fr
whoopingcrane.com
craftingalegacy.com
jayfurnitureco.com
unislaw-narty.pl
napisat-pismo-gubernatoru.ru:443
hm-com.com
mrkluttz.com
teethinadaydentalimplants.com
circlecitydj.com
simpleitsolutions.ch
cymru.futbol
xn--80addfr4ahr.dp.ua
rozmata.com
carolynfriedlander.com
michaelfiegel.com
placermonticello.com
mneti.ru
mindsparkescape.com
reizenmetkinderen.be
pisofare.co
descargandoprogramas.com
advancedeyecare.com
rvside.com
iactechnologies.net
livedeveloper.com
worldproskitour.com
startuplive.org
altocontatto.net
relevantonline.eu
ebible.co
chatberlin.de
yourcosmicbeing.com
cap29010.it
putzen-reinigen.com
itheroes.dk
neolaiamedispa.com
kompresory-opravy.com
hiddensee-buhne11.de
smartercashsystem.com
sellthewrightway.com
lollachiro.com
triplettabordeaux.fr
dayenne-styling.nl
skinkeeper.li
brannbornfastigheter.se
kellengatton.com
funworx.de
myfbateam.com
mike.matthies.de
frimec-international.es
nrgvalue.com
webforsites.com
prometeyagro.com.ua
muller.nl
suitesartemis.gr
cac2040.com
pubcon.com
geitoniatonaggelon.gr
landgoedspica.nl
donau-guides.eu
moira-cristescu.com
levencovka.ru
leloupblanc.gr
gosouldeep.com
profiz.com
ronielyn.com
happycatering.de
etgdogz.de
secrets-clubs.co.uk
hom-frisor.dk
schlagbohrmaschinetests.com
limounie.com
iron-mine.ru
log-barn.co.uk
michal-s.co.il
yourhappyevents.fr
framemyballs.com
loparnille.se
invela.dk
boomerslivinglively.com
operativadigital.com
ideamode.com
forskolinslimeffect.net
gratiocafeblog.wordpress.com
avisioninthedesert.com
goddardleadership.org
egpu.fr
skoczynski.eu
suonenjoen.fi
solutionshosting.co.uk
b3b.ch
qandmmusiccenter.com
teamsegeln.ch
soundseeing.net
vitoriaecoturismo.com.br
ziliak.com
epicjapanart.com
skyscanner.ro
trevi-vl.ru
dnqa.co.uk
mslp.org
spectamarketingdigital.com.br
deziplan.ru
vitormmcosta.com
dieetuniversiteit.nl
mikegoodfellow.co.uk
cainlaw-okc.com
carmel-york.com
purepreprod4.com
ilovefullcircle.com
cardsandloyalty.com
testitjavertailut.net
aberdeenartwalk.org
antesacademy.it
raeoflightmusic.com
littlesaints.academy
mazzaropi.com.br
delegationhub.com
scentedlair.com
ciga-france.fr
dr-vita.de
advanced-removals.co.uk
techybash.com
abulanov.com
voice2biz.com
endstarvation.com
anchelor.com
parseport.com
flossmoordental.com
birthplacemag.com
medicalsupportco.com
larchwoodmarketing.com
dantreranch.com
magnetvisual.com
akcadagofis.com
tchernia-conseil.fr
bendel-partner.de
matthieupetel.fr
laaisterplakky.nl
renehartman.nl
traitware.com
bluelakevision.com
muni.pe
toranjtuition.org
charlesfrancis.photos
breakluckrecords.com
alexwenzel.de
ijsselbeton.nl
stringnosis.academy
sealgrinderpt.com
bavovrienden.nl
domaine-des-pothiers.com
digitale-elite.de
casinodepositors.com
alltagsrassismus-entknoten.de
site.markkit.com.br
gazelle-du-web.com
azerbaycanas.com
quitescorting.com
pinthelook.com
gavelmasters.com
leijstrom.com
ocduiblog.com
skooppi.fi
subquercy.fr
fta-media.com
thestudio.academy
initconf.com
apiarista.de
fla.se
annenymus.com
eksperdanismanlik.com
lapponiasafaris.com
verbouwingsdouche.nl
axisoflove.org:443
slideevents.be
cincinnatiphotocompany.org
greeneyetattoo.com
speakaudible.com
p-ride.live
lovcase.com
pilotgreen.com
sunsolutions.es
internestdigital.com
onlinetvgroup.com
forextimes.ru
sharonalbrightdds.com
galatee-couture.com
peppergreenfarmcatering.com.au
concontactodirecto.com
saboboxtel.uk
computer-place.de
vdolg24.online
belinda.af
brownswoodblog.com
agencewho-aixenprovence.fr
kenmccallum.com
mediahub.co.nz
kickittickets.com
marmarabasin.com
masecologicos.com
rivermusic.nl
pokemonturkiye.com
dierenambulancealkmaar.nl
brunoimmobilier.com
autoteamlast.de
signededenroth.dk
wg-heiligenstadt.de
chinowarehousespace.com
ncjc.ca
stathmoulis.gr
santastoy.store
ygallerysalonsoho.com:443
jandhpest.com
ntinasfiloxenia.gr
bodet150ans.com
omnicademy.com
mjk.digital
jakubrybak.com
livelai.com
bjornvanvulpen.nl
palmecophilippines.com
banukumbak.com
myplaywin3.com
tecleados.com
katherinealy.com
corporacionrr.com
aquacheck.co.za
hawthornsretirement.co.uk
lassocrm.com
hostingbangladesh.net
cotton-avenue.co.il
publicompserver.de
benchbiz.com
2020hindsight.info
broccolisoep.nl
optigas.com
teutoradio.de
bellesiniacademy.org
mediogiro.com.ar
bilius.dk
ruggestar.ch
bajova.sk
pazarspor.org.tr
ahgarage.com
krishnabrawijaya.com
werkzeugtrolley.net
linkbuilding.life
qrs-international.com
mursall.de
albcleaner.fr
xtensifi.com
tutvracks.com
apogeeconseils.fr
nevadaruralhousingstudies.org
molade.nl
electricianul.com
docarefoundation.org
finnergo.eu
rizplakatjaya.com
greenrider.nl
luvbec.com
uci-france.fr
glennverschueren.be
jobscore.com
hartofurniture.com
furland.ru
adaduga.info
selected-minds.de
buonabitare.com
elliemaccreative.wordpress.com
jobkiwi.com.ng
smartmind.net
sveneulberg.de
pourlabretagne.bzh
lmmont.sk
tesisatonarim.com
four-ways.com
letterscan.de
shortysspices.com
campusce.com
redpebblephotography.com
maxcube24.com.ua
alwaysdc.com
chris-anne.com
amco.net.au
yuanshenghotel.com
theintellect.edu.pk
blavait.fr
polynine.com
fire-space.com
thisprettyhair.com
goodherbalhealth.com
angeleyezstripclub.com
bg.szczecin.pl
tzn.nu
frameshift.it
iexpert99.com
alaskaremote.com
denverwynkoopdentist.com
enews-qca.com
janmorgenstern.com
geoweb.software
successcolony.com.ng
bookingwheel.com
kroophold-sjaelland.dk
malevannye.ru
drnelsonpediatrics.com
fotoeditores.com
lovetzuchia.com
penumbuhrambutkeiskei.com
sprintcoach.com
ludoil.it
memphishealthandwellness.com
envomask.com
jlwilsonbooks.com
adterium.com
evsynthacademy.org
ledyoucan.com
mrcar.nl
manzel.tn
stitch-n-bitch.com
atma.nl
patriotcleaning.net
mayprogulka.ru
lyricalduniya.com
augen-praxisklinik-rostock.de
fitnessblenderstory.com
stoneridgemontessori.com
reputation-medical.online
brinkdoepke.eu
blucamp.com
cp-bap.de
randyabrown.com
vedsegaard.dk
bagaholics.in
witraz.pl
mustangmarketinggroup.com
lagschools.ng
richardkershawwines.co.za
trainiumacademy.com
solidhosting.nl
hoteltantra.com
mangimirossana.it
agriturismocastagneto.it
chomiksy.net
asiaartgallery.jp
cmascd.com
encounter-p.net
prodentalblue.com
kosten-vochtbestrijding.be
ya-elka.ru
kdbrh.com
production-stills.co.uk
condormobile.fr
die-immo-agentur.de
sochi-okna23.ru
johnkoen.com
gbk-tp1.de
opticahubertruiz.com
theater-lueneburg.de
natturestaurante.com.br
alnectus.com
nalliasmali.net
enactusnhlstenden.com
bcabattoirs.org
redctei.co
valiant-voice.com
rino-gmbh.com
aheadloftladders.co.uk
rolleepollee.com
mbuildinghomes.com
lsngroupe.com
rubyaudiology.com
3daywebs.com
amelielecompte.wordpress.com
pharmeko-group.com
brisbaneosteopathic.com.au
zinnystar.com
bringmehope.org
betterce.com
focuskontur.com
volta.plus
baita.ac
beauty-traveller.com
inewsstar.com
skolaprome.eu
auto-opel.ro
dentourage.com
rs-danmark.dk
tweedekansenloket.nl
xn--80abehgab4ak0ddz.xn--p1ai
letsstopsmoking.co.uk
atrgroup.it
tages-geldvergleich.de
animalfood-online.de
t3brothers.com
cssp-mediation.org
neonodi.be
pays-saint-flour.fr
distrifresh.com
yournextshoes.com
thegetawaycollective.com
kookooo.com
sachainchiuk.com
uncensoredhentaigif.com
bayshoreelite.com
linearete.com
tramadolhealth.com
signamedia.de
eshop.design
catchup-mag.com
ingresosextras.online
dinecorp.com
fazagostar.co
peninggibadan.co.id
citiscapes-art.com
supercarhire.co.uk
zorgboerderijravensbosch.nl
morgansconsult.com
tetameble.pl
baumfinancialservices.com
springfieldplumbermo.com
hypogenforensic.com
fixx-repair.com
avis.mantova.it
mondolandscapes.com
zdrowieszczecin.pl
patassociation.com
c-sprop.com
directique.com
gatlinburgcottage.com
centuryvisionglobal.com
andreaskildegaard.dk
sarahspics.co.uk
citydogslife.com
mrmac.com
rattanwarehouse.co.uk
nepressurecleaning.com
mamajenedesigns.com
endlessrealms.net
onlinemarketingsurgery.co.uk
hepishopping.com
designimage.ae
renderbox.ch
kristianboennelykke.dk
altitudeboise.com
gsconcretecoatings.com
oscommunity.de
cops4causes.org
rtc24.com
animation-pro.co.uk
jimprattmediations.com
artvark.nl
hostaletdelsindians.es
oththukaruva.com
crestgood.com
dreamvoiceclub.org
cl0nazepamblog.com
cyberpromote.de
slotenmakerszwijndrecht.nl
innovationgames-brabant.nl
scotlandsroute66.co.uk
louiedager.com
photonag.com
pankiss.ru
hotjapaneselesbian.com
innersurrection.com
rokthetalk.com
juergenblaetz.de
edvestors.org
holocine.de
magrinya.net
karmeliterviertel.com
globalskills.pt
barbaramcfadyenjewelry.com
pansionatblago.ru
eurethicsport.eu
90nguyentuan.com
bescomedical.de
opt4cdi.com
riffenmattgarage.ch
parisschool.ru
zealcon.ae
alattekniksipil.com
dibli.store
motocrossplace.co.uk
bmw-i-pure-impulse.com
golfclublandgoednieuwkerk.nl
ronaldhendriks.nl
premiumweb.com.ua:443
unboxtherapy.site
amorbellezaysalud.com
shortsalemap.com
taulunkartano.fi
mariajosediazdemera.com
acb-gruppe.ch
innervisions-id.com
bridalcave.com
mindfuelers.com
bychowo.pl
bumbipdeco.site
luvinsburger.fr
billyoart.com
andrealuchesi.it
jefersonalessandro.com
singletonfinancial.com
paprikapod.com
haard-totaal.nl
theatre-embellie.fr
mahikuchen.com
devplus.be
anleggsregisteret.no
zaczytana.com
awaitspain.com
ced-elec.com
lifeinbreaths.com
wrinstitute.org
skyboundnutrition.co.uk
johnstonmingmanning.com
rsidesigns.com
tellthebell.website
metriplica.academy
buzzneakers.com
clinic-beethovenstrasse-ag.ch
grafikstudio-visuell.de
turing.academy
nationnewsroom.com
mercadodelrio.com
biketruck.de
richardiv.com
reygroup.pt
pxsrl.it
kafkacare.com
pinkxgayvideoawards.com
christianscholz.de
thenalpa.com
motocrosshideout.com
oexebusiness.com
marcandy.com
angelsmirrorus.com
plbinsurance.com
eatyoveges.com
breathebettertolivebetter.com
arazi.eus
explora.nl
jollity.hu
adabible.org
arabianmice.com
licensed-public-adjuster.com
ayudaespiritualtamara.com
cuadc.org
look.academy
parksideseniorliving.net
brighthillgroup.com
fi-institutionalfunds.com
limmortelyouth.com
bulyginnikitav.000webhostapp.com
boloria.de
lattalvor.com
malzomattalar.com
primemarineengineering.com
thepixelfairy.com
fidelitytitleoregon.com
nykfdyrehospital.dk
glas-kuck.de
hameghlim.com
spirello.nl
alpesiberie.com
o2o-academy.com
nutriwell.com.sg
stabilisateur.fr
lumturo.academy
bundan.com
indiebizadvocates.org
trivselsguide.dk
omegamarbella.com
airserviceunlimited.com
diverfiestas.com.es
imajyuku-sozoku.com
grupoexin10.com
lunoluno.com
transifer.fr
nginx.com
eventosvirtualesexitosos.com
racefietsenblog.nl
diakonie-weitramsdorf-sesslach.de
makingmillionaires.net
texanscan.org
lidkopingsnytt.nu
babysitting-hk.helpergo.co
strauchs-wanderlust.info
campinglaforetdetesse.com
catalyseurdetransformation.com
leopoldineroux.com
bakingismyyoga.com
ncn.nl
amyandzac.com
hekecrm.com
haus-landliebe.de
curtsdiscountguns.com
lisa-poncon.fr
chainofhopeeurope.eu
fanuli.com.au
logosindustries.com
sycamoregreenapts.com
osn.ro
business-basic.de
molinum.pt
bohrlochversicherung.info
circuit-diagramz.com
buerocenter-butzbach-werbemittel.de
premier-iowa.com
deduktia.fi
customroasts.com
frankgoll.com
billscars.net
clemenfoto.dk
der-stempelking.de
line-x.co.uk
husetsanitas.dk
housesofwa.com
mensemetgesigte.co.za
hvitfeldt.dk
poems-for-the-soul.ch
oncarrot.com
domilivefurniture.com
bluemarinefoundation.com
jaaphoekzema.nl
forumsittard.nl
energosbit-rp.ru
metallbau-hartmann.eu
oro.ae
m2graph.fr
nieuwsindeklas.be
paradigmlandscape.com
miscbo.it
test-teleachat.fr
g2mediainc.com
9nar.com
therapybusinessacademy.com
elitkeramika-shop.com.ua
mariamalmahdi.com
baptistdistinctives.org
ilveshistoria.com
promus.ca
expohomes.com
cascinarosa33.it
tbalp.co.uk
rename.kz
sytzedevries.com
mollymccarthydesign.com
factorywizuk.com
paardcentraal.nl
xn--ziinoapte-6ld.ro
kartuindonesia.com
hospitalitytrainingsolutions.co.uk
the5thquestion.com
sambaglow.com
mariannelemenestrel.com
phoenixcrane.com
perceptdecor.com
tieronechic.com
qwikcoach.com
dinedrinkdetroit.com
111firstdelray.com
switch-made.com
bd2fly.com
tastevirginia.com
basindentistry.com
liepertgrafikweb.at
hawaiisteelbuilding.com
entdoctor-durban.com
queertube.net
awag-blog.de
gaearoyals.com
mundo-pieces-auto.fr
perfectgrin.com
jameswilliamspainting.com
aoyama.ac
rentingwell.com
satoblog.org
heimdalbygg.no
drbenveniste.com
kryddersnapsen.dk
agora-collectivites.com
catering.com
salonlamar.nl
voetbalhoogeveen.nl
kelsigordon.com
aceroprime.com
bruut.online
vipcarrental.ae
ninjaki.com
lookandseen.com
tilldeeke.de
alharsunindo.com
a-zpaperwork.eu
spacebel.be
direitapernambuco.com
legundschiess.de
spartamovers.com
xn--billigafrgpatroner-stb.se
carsten.sparen-it.de
precisetemp.com
alcye.com
saint-malo-developpement.fr
jdscenter.com
atelierkomon.com
harleystreetspineclinic.com
gurutechnologies.net
jax-interim-and-projectmanagement.com
sololibrerie.it
denhaagfoodie.nl
glende-pflanzenparadies.de
sber-biznes.com
jalkapuu.net
stagefxinc.com
lexced.com
foerderverein-vatterschule.de
zwemofficial.nl
cxcompany.com
humanviruses.org
metcalfe.ca
greatofficespaces.net
lgiwines.com
hutchstyle.co.uk
daveystownhouse.com
protoplay.ca
xrresources.com
factoriareloj.com
buffdaddyblog.com
kamin-somnium.de
mazift.dk
min-virksomhed.dk
stressreliefadvice.com
druktemakersheerenveen.nl
pixelhealth.net
ownidentity.com
lesyeuxbleus.net
martha-frets-ceramics.nl
speiserei-hannover.de
fascaonline.com
unexplored.gr
julielusktherapy.com
goeppinger-teppichreinigung.de
otpusk.zp.ua
zuerich-umzug.ch
christopherhannan.com
acibademmobil.com.tr
craftron.com
smartspeak.com
drbrianhweeks.com
thiagoperez.com
avtoboss163.ru:443
specialtyhomeservicesllc.com
jglconsultancy.com
the3-week-diet.net
the-cupboard.co.uk
11.in.ua
affligemsehondenschool.be
fann.ru
orchardbrickwork.com
billigeflybilletter.dk
aidanpublishing.co.uk
margaretmcshane.com
dmlcpa.com
wribrazil.com
pajagus.fr
eyedoctordallas.com
jlgraphisme.fr
k-zubki.ru
espaciopolitica.com
cookinn.nl
astrographic.com
colored-shelves.com
jag.me
davedavisphotos.com
futurenetworking.com
tatyanakopieva.ru
shrinkingplanet.com
chorusconsulting.net
wasnederland.nl
graygreenbiomedservices.com
ultimatelifesource.com
noda.com.ua
belofloripa.be
edrickennedymacfoy.com
globalcompliancenews.com
oportowebdesign.com
physio-lang.de
newonestop.com
ravage-webzine.nl
triplettagaite.fr
agendatwentytwenty.com
apmollerpension.com
rhino-storage.co.uk
goodboyscustom.com
nuohous.com
lashandbrowenvy.com
dennisverschuur.com
hinotruckwreckers.com.au
wademurray.com
grancanariaregional.com
janellrardon.com
keyboardjournal.com
tothebackofthemoon.com
blueridgeheritage.com
scholarquotes.com
biodentify.ai
jmmartinezilustrador.com
radishallgood.com
stage-infirmier.fr
istantidigitali.com
groovedealers.ru
bratek-immobilien.de
zumrutkuyutemel.com
topvijesti.net
leansupremegarcinia.net
comoserescritor.com
aciscomputers.com
bourchier.org
ramirezprono.com
wordpress.idium.no
bluetenreich-brilon.de
annida.it
go.labibini.ch
floweringsun.org
nxtstg.org
dentallabor-luenen.de
mieleshopping.it
watchsale.biz
gardenpartner.pl
ox-home.com
cmeow.com
proffteplo.com
gta-jjb.fr
keuken-prijs.nl
justaroundthecornerpetsit.com
insane.agency
hotelturbo.de
rossomattonecase.it
alabamaroofingllc.com
kombi-dress.com
global-migrate.com
jonnyhooley.com
askstaffing.com
collegetennis.info
awaisghauri.com
finsahome.co.uk
thehovecounsellingpractice.co.uk
agenceassemble.fr
arearugcleaningnyc.com
almamidwifery.com
walterman.es
claudiakilian.de
terraflair.de
kryptos72.com
universelle.fr
eafx.pro
vvego.com
georgemuncey.com
netadultere.fr
monstarrsoccer.com
block-optic.com
stralsund-ansichten.de
guohedd.com
topautoinsurers.net
nvisionsigns.com
powershell.su
ivancacu.com
sjtpo.org
cormanmarketing.com
fsbforsale.com
aslog.fr
burg-zelem.de
klapanvent.ru
schluesseldienste-hannover.de
veggienessa.com
rapid5kloan.org
rarefoods.ro
silverbird.dk
profibersan.com
easydental.ae
girlish.ae
achetrabalhos.com
fluzfluzrewards.com
sweetz.fr
handyman-silkeborg.dk
eos-horlogerie.com
olry-cloisons.fr
skidpiping.de
ufovidmag.com
karelinjames.com
hnkns.com
elex.is
advance-refle.com
liverpoolabudhabi.ae
acornishstudio.co.uk
liveyourheartout.co
utilisacteur.fr
ikadomus.com
ikzoekgod.be
berdonllp.com
latteswithleslie.com
martinipstudios.com
boyfriendsgoal.site
leatherjees.com
pvandambv.nl
mac-computer-support-hamburg.de
nbva.co.uk
akwaba-safaris.com
hostastay.com
nourella.com
nicksrock.com
bonitabeachassociation.com
welovecustomers.fr
alene.co
rishigangoly.com
interlinkone.com
sbit.ag
outstandingminialbums.com
maryairbnb.wordpress.com
sppdstats.com
weddingceremonieswithtim.com
khtrx.com
advesa.com
so-sage.fr
kerstliedjeszingen.nl
allinonecampaign.com
subyard.com
happylublog.wordpress.com
mesajjongeren.nl
dcc-eu.com
fysiotherapierijnmond.nl
stanleyqualitysystems.com
nexstagefinancial.com
loysonbryan.com
ykobbqchicken.ca
beandrivingschool.com.au
janasfokus.com
projektparkiet.pl
cc-experts.de
campusescalade.com
onesynergyinternational.com
markseymourphotography.co.uk
kemtron.fr
triavlete.com
cesep2019.com
5pointpt.com
koncept-m.ru
modamarfil.com
acumenconsultingcompany.com
ddmgen.com
activeterroristwarningcompany.com
narca.net
internalresults.com
epsondriversforwindows.com
5thactors.com
dentalcircle.com
airvapourbarrier.com
mind2muscle.nl
wyreforest.net
cleanroomequipment.ie
thesilkroadny.com
fridakids.com
pedmanson.com
bcmets.info
k-v-f.de
fotoslubna.com
duthler.nl
afbudsrejserallinclusive.dk
baikalflot.ru
angelika-schwarz.com
kvetymichalovce.sk
slotspinner.com
palema.gr
artcase.pl
mediabolmong.com
metroton.ru
auberives-sur-vareze.fr
pro-gamer.pl
heuvelland-oaze.nl
ceocenters.com
latableacrepes-meaux.fr
schulz-moelln.de
devus.de
leadforensics.com
bubbalucious.com
yvesdoin-aquarelles.fr
kuriero.pro
aktivfriskcenter.se
csaballoons.com
n-newmedia.de
alisodentalcare.com
datatri.be
fskhjalmar.se
1deals.com
dogsunlimitedguide.com
mgimalta.com
nauticmarine.dk
creohn.de
silkeight.com
bertbutter.nl
levelseven.be
nepal-pictures.com
biblica.com
coachpreneuracademy.com
from02pro.com
johnsonweekly.com
eastgrinsteadwingchun.com
theboardroomafrica.com
jobstomoveamerica.org
professionetata.com
oraweb.net
wineandgo.hu
midwestschool.org
richardmaybury.co.uk
kausette.com
thegrinningmanmusical.com
bodymindchallenger.com
soncini.ch
web865.com
hensleymarketing.com
smarttourism.academy
laylavalentine.com
saberconcrete.com
agrifarm.dk
parentsandkids.com
tradenavigator.ch
wirmuessenreden.com
rechtenplicht.be
victorvictoria.com
-
net
true
-
pid
8
-
prc
mysql.exe
-
ransom_oneliner
Your computer have been infected! Read the {EXT}-readme.txt file for more information.
-
ransom_template
Hello dear friend! Your files are encrypted, and, as result you can't use it. You must visit our page to get instructions about decryption process. All encrypted files have got {EXT} extension. Instructions into the TOR network ----------------------------- Install TOR browser from https://torproject.org/ Visit the following link: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} Instructions into WWW (The following link can not be in work state, if true, use TOR above): ----------------------------- Visit the following link: http://decryptor.top/{UID} Page will ask you for the key and extension name: {EXT}. Your key code: {KEY}
-
sub
10
Extracted
C:\Users\Default\zg1l099-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/2F15BDB62D29967B
http://decryptor.top/2F15BDB62D29967B
Extracted
C:\Users\Default\121q42l-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/578D93FF9A00C149
http://decryptor.top/578D93FF9A00C149
Targets
-
-
Target
619bcc16546e3d7ddea8045fa88f65fc_JaffaCakes118
-
Size
157KB
-
MD5
619bcc16546e3d7ddea8045fa88f65fc
-
SHA1
bab813d5a45552978bba9a413089222c3f225a6c
-
SHA256
5fe8e804cc0e7d211019bf37dbb18e4a00af24be11cc9407fac6d648c01716fb
-
SHA512
22997dc1a27b3ee620ab248336dd7a373d7a5217c30135a36943555e605ae7ea81fe55b5c0b596bc14748831144ae91b4272dd6a319cc3d69bea2fa7caccdded
-
SSDEEP
3072:Fi8Iy8EytSLbi4eTMlwDCnuZ3jmOaqGpeT3:U8IUykbnWJZ3jmOaqFT3
-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Renames multiple (184) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-