General
-
Target
63ae6ca6853552716571555546833d99_JaffaCakes118
-
Size
166KB
-
Sample
240521-r733ashf39
-
MD5
63ae6ca6853552716571555546833d99
-
SHA1
09e37e98a74ec8edb36b22a4eb51dbed4390544a
-
SHA256
9d3a482d9441876096e0cee429fedf7b9f7e1c6a50b3e4b2009884019627d879
-
SHA512
087baf5fbf764f480f384cbdee878d3dfb8b3880f378b4597d5e292f392341e5da196ee2232a441c6268b7760afffdde293f35f536ee55cff4992b4b45238f86
-
SSDEEP
1536:EOYMGzUt2Z+tRvSKGNkR87Kk9VWvDtwVQKeDZz0TDsTR6wss+oJ27b5EIBNUup7E:EJMawtnGqtWoKeZC62aoNUSncZUw+S3
Static task
static1
Behavioral task
behavioral1
Sample
63ae6ca6853552716571555546833d99_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
63ae6ca6853552716571555546833d99_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
sodinokibi
$2a$10$QV..IaQ6B9QV724W3myufeRDO8uuVgVqGSa6eDWdTrsJ1a32XBdh.
4402
employeesurveys.com
izzi360.com
centromarysalud.com
coding-machine.com
schutting-info.nl
ceid.info.tr
eglectonk.online
tulsawaterheaterinstallation.com
rumahminangberdaya.com
buroludo.nl
labobit.it
steampluscarpetandfloors.com
andersongilmour.co.uk
satyayoga.de
sotsioloogia.ee
oceanastudios.com
cactusthebrand.com
danielblum.info
cursoporcelanatoliquido.online
stefanpasch.me
anybookreader.de
marcuswhitten.site
withahmed.com
aglend.com.au
baylegacy.com
trapiantofue.it
aurum-juweliere.de
aodaichandung.com
xn--fn-kka.no
devok.info
socialonemedia.com
pinkexcel.com
urclan.net
hebkft.hu
testcoreprohealthuk.com
delawarecorporatelaw.com
fundaciongregal.org
johnsonfamilyfarmblog.wordpress.com
spinheal.ru
pierrehale.com
werkkring.nl
chandlerpd.com
philippedebroca.com
colorofhorses.com
newstap.com.ng
thomasvicino.com
bsaship.com
ivivo.es
cnoia.org
musictreehouse.net
diversiapsicologia.es
homesdollar.com
kostenlose-webcams.com
promesapuertorico.com
socstrp.org
marchand-sloboda.com
gmto.fr
happyeasterimages.org
baronloan.org
slimani.net
compliancesolutionsstrategies.com
whittier5k.com
deprobatehelp.com
faronics.com
spacecitysisters.org
worldhealthbasicinfo.com
despedidascostablanca.es
alvinschwartz.wordpress.com
4net.guru
globedivers.wordpress.com
personalenhancementcenter.com
littlebird.salon
punchbaby.com
completeweddingkansas.com
houseofplus.com
coursio.com
vesinhnha.com.vn
epwritescom.wordpress.com
oslomf.no
fotoscondron.com
serce.info.pl
seproc.hn
mountsoul.de
seagatesthreecharters.com
kmbshipping.co.uk
flexicloud.hk
celeclub.org
cuspdental.com
devstyle.org
run4study.com
christinarebuffetcourses.com
raschlosser.de
onlybacklink.com
blossombeyond50.com
csgospeltips.se
abogadosaccidentetraficosevilla.es
hannah-fink.de
vox-surveys.com
officehymy.com
osterberg.fi
chrissieperry.com
nokesvilledentistry.com
hatech.io
lefumetdesdombes.com
ecpmedia.vn
connectedace.com
webcodingstudio.com
tips.technology
leather-factory.co.jp
stoneys.ch
gantungankunciakrilikbandung.com
kao.at
lynsayshepherd.co.uk
suncrestcabinets.ca
americafirstcommittee.org
selfoutlet.com
platformier.com
nestor-swiss.ch
crosspointefellowship.church
lapmangfpt.info.vn
augenta.com
waynela.com
surespark.org.uk
sahalstore.com
waveneyrivercentre.co.uk
antiaginghealthbenefits.com
sexandfessenjoon.wordpress.com
theadventureedge.com
hhcourier.com
groupe-cets.com
hvccfloorcare.com
kojinsaisei.info
c2e-poitiers.com
homng.net
nosuchthingasgovernment.com
nurturingwisdom.com
oneheartwarriors.at
tomoiyuma.com
abuelos.com
stallbyggen.se
bhwlawfirm.com
winrace.no
pcp-nc.com
fayrecreations.com
durganews.com
quickyfunds.com
bauertree.com
sw1m.ru
cheminpsy.fr
agence-referencement-naturel-geneve.net
burkert-ideenreich.de
humanityplus.org
mastertechengineering.com
ladelirante.fr
renergysolution.com
crediacces.com
radaradvies.nl
DupontSellsHomes.com
proudground.org
navyfederalautooverseas.com
xn--fnsterputssollentuna-39b.se
pt-arnold.de
xn--vrftet-pua.biz
fizzl.ru
courteney-cox.net
bptdmaluku.com
koken-voor-baby.nl
offroadbeasts.com
ivfminiua.com
kingfamily.construction
rieed.de
sportsmassoren.com
collaborativeclassroom.org
humancondition.com
simpliza.com
katketytaanet.fi
digi-talents.com
nacktfalter.de
peterstrobos.com
geoffreymeuli.com
eraorastudio.com
sportiomsportfondsen.nl
edv-live.de
synlab.lt
imperfectstore.com
autodemontagenijmegen.nl
rushhourappliances.com
craftleathermnl.com
juneauopioidworkgroup.org
bee4win.com
coffreo.biz
lascuola.nl
joseconstela.com
smartypractice.com
igrealestate.com
jasonbaileystudio.com
mylolis.com
zzyjtsgls.com
drugdevice.org
adoptioperheet.fi
iwelt.de
eadsmurraypugh.com
bargningavesta.se
balticdentists.com
praxis-foerderdiagnostik.de
ouryoungminds.wordpress.com
anteniti.com
psc.de
nsec.se
crowd-patch.co.uk
boosthybrid.com.au
sarbatkhalsafoundation.org
effortlesspromo.com
hairnetty.wordpress.com
ccpbroadband.com
aunexis.ch
hiddencitysecrets.com.au
greenko.pl
leeuwardenstudentcity.nl
walter-lemm.de
nijaplay.com
huissier-creteil.com
pivoineetc.fr
simplyblessedbykeepingitreal.com
xn--thucmctc-13a1357egba.com
vdberg-autoimport.nl
kalkulator-oszczednosci.pl
ki-lowroermond.nl
corelifenutrition.com
smart-light.co.uk
greenfieldoptimaldentalcare.com
lebellevue.fr
denovofoodsgroup.com
calxplus.eu
coastalbridgeadvisors.com
smogathon.com
ora-it.de
teresianmedia.org
mooglee.com
longislandelderlaw.com
memaag.com
minipara.com
amylendscrestview.com
mdk-mediadesign.de
faroairporttransfers.net
ostheimer.at
linnankellari.fi
patrickfoundation.net
webmaster-peloton.com
sanaia.com
fax-payday-loans.com
myzk.site
facettenreich27.de
team-montage.dk
atozdistribution.co.uk
mylovelybluesky.com
mirkoreisser.de
acomprarseguidores.com
i-trust.dk
ussmontanacommittee.us
micro-automation.de
retroearthstudio.com
fairfriends18.de
stupbratt.no
stampagrafica.es
mytechnoway.com
itelagen.com
freie-baugutachterpraxis.de
cite4me.org
triggi.de
hotelsolbh.com.br
shonacox.com
vorotauu.ru
gadgetedges.com
karacaoglu.nl
fensterbau-ziegler.de
hokagestore.com
apolomarcas.com
answerstest.ru
centuryrs.com
sipstroysochi.ru
naturstein-hotte.de
rostoncastings.co.uk
kunze-immobilien.de
theclubms.com
myteamgenius.com
ohidesign.com
baptisttabernacle.com
kevinjodea.com
destinationclients.fr
baumkuchenexpo.jp
truenyc.co
jeanlouissibomana.com
oneplusresource.org
bigler-hrconsulting.ch
deschl.net
qualitus.com
transportesycementoshidalgo.es
foryourhealth.live
chefdays.de
xn--rumung-bua.online
harveybp.com
eaglemeetstiger.de
urist-bogatyr.ru
revezlimage.com
leoben.at
lecantou-coworking.com
walkingdeadnj.com
controldekk.com
appsformacpc.com
sinal.org
mariposapropaneaz.com
buymedical.biz
luckypatcher-apkz.com
thedresserie.com
lange.host
commonground-stories.com
brigitte-erler.com
gymnasedumanagement.com
tanzschule-kieber.de
testzandbakmetmening.online
roygolden.com
jacquin-maquettes.com
liveottelut.com
vyhino-zhulebino-24.ru
starsarecircular.org
clos-galant.com
pridoxmaterieel.nl
ontrailsandboulevards.com
aselbermachen.com
trackyourconstruction.com
tigsltd.com
jobmap.at
corendonhotels.com
allure-cosmetics.at
torgbodenbollnas.se
dubscollective.com
you-bysia.com.au
executiveairllc.com
copystar.co.uk
mbfagency.com
imadarchid.com
plv.media
kath-kirche-gera.de
slashdb.com
syndikat-asphaltfieber.de
caribbeansunpoker.com
shiftinspiration.com
healthyyworkout.com
blacksirius.de
joyeriaorindia.com
thenewrejuveme.com
tandartspraktijkheesch.nl
hushavefritid.dk
gonzalezfornes.es
spsshomeworkhelp.com
maineemploymentlawyerblog.com
solerluethi-allart.ch
asteriag.com
pay4essays.net
schraven.de
monark.com
abogados-en-alicante.es
cranleighscoutgroup.org
austinlchurch.com
babcockchurch.org
datacenters-in-europe.com
kaliber.co.jp
importardechina.info
wacochamber.com
leda-ukraine.com.ua
verifort-capital.de
morawe-krueger.de
fibrofolliculoma.info
jenniferandersonwriter.com
wmiadmin.com
bimnapratica.com
ftf.or.at
finde-deine-marke.de
jvanvlietdichter.nl
wychowanieprzedszkolne.pl
mdacares.com
thedad.com
goodgirlrecovery.com
sloverse.com
kosterra.com
ausbeverage.com.au
sanyue119.com
helikoptervluchtnewyork.nl
mirjamholleman.nl
falcou.fr
theapifactory.com
123vrachi.ru
tophumanservicescourses.com
bigasgrup.com
artige.com
milltimber.aberdeen.sch.uk
id-et-d.fr
schlafsack-test.net
mercantedifiori.com
evangelische-pfarrgemeinde-tuniberg.de
bxdf.info
body-guards.it
skiltogprint.no
milsing.hr
vietlawconsultancy.com
pelorus.group
filmvideoweb.com
ilcdover.com
edelman.jp
podsosnami.ru
mapawood.com
strategicstatements.com
naswrrg.org
lightair.com
1team.es
aniblinova.wordpress.com
ogdenvision.com
gopackapp.com
the-domain-trader.com
danholzmann.com
cleliaekiko.online
pogypneu.sk
sairaku.net
i-arslan.de
themadbotter.com
pferdebiester.de
behavioralmedicinespecialists.com
micahkoleoso.de
mmgdouai.fr
freie-gewerkschaften.de
35-40konkatsu.net
dpo-as-a-service.com
ino-professional.ru
bockamp.com
hashkasolutindo.com
noixdecocom.fr
bafuncs.org
digivod.de
petnest.ir
oemands.dk
physiofischer.de
noskierrenteria.com
dramagickcom.wordpress.com
milestoneshows.com
bricotienda.com
friendsandbrgrs.com
lenreactiv-shop.ru
familypark40.com
summitmarketingstrategies.com
mrxermon.de
ceres.org.au
videomarketing.pro
fitovitaforum.com
cuppacap.com
vibehouse.rw
gaiam.nl
dekkinngay.com
innote.fi
analiticapublica.es
brandl-blumen.de
adultgamezone.com
marathonerpaolo.com
maratonaclubedeportugal.com
henricekupper.com
jadwalbolanet.info
xoabigail.com
ftlc.es
takeflat.com
simoneblum.de
paradicepacks.com
airconditioning-waalwijk.nl
dnepr-beskid.com.ua
wellplast.se
geisterradler.de
eco-southafrica.com
grupocarvalhoerodrigues.com.br
veybachcenter.de
tuuliautio.fi
bodyforwife.com
skanah.com
ctrler.cn
opatrovanie-ako.sk
finediningweek.pl
darnallwellbeing.org.uk
architecturalfiberglass.org
cursosgratuitosnainternet.com
boldcitydowntown.com
lichencafe.com
remcakram.com
stoeberstuuv.de
kenhnoithatgo.com
thewellnessmimi.com
shiresresidential.com
sporthamper.com
pier40forall.org
wurmpower.at
lubetkinmediacompanies.com
zimmerei-deboer.de
pickanose.com
tetinfo.in
restaurantesszimmer.de
vitalyscenter.es
mindpackstudios.com
lucidinvestbank.com
tsklogistik.eu
rafaut.com
baustb.de
antonmack.de
rosavalamedahr.com
yamalevents.com
luxurytv.jp
blewback.com
hrabritelefon.hr
iyahayki.nl
lionware.de
backstreetpub.com
refluxreducer.com
tinkoff-mobayl.ru
new.devon.gov.uk
hellohope.com
jorgobe.at
c-a.co.in
heurigen-bauer.at
manutouchmassage.com
edrcreditservices.nl
em-gmbh.ch
tongdaifpthaiphong.net
bouldercafe-wuppertal.de
better.town
dr-seleznev.com
fitnessingbyjessica.com
craigmccabe.fun
croftprecision.co.uk
esope-formation.fr
bastutunnan.se
ditog.fr
body-armour.online
zweerscreatives.nl
chatizel-paysage.fr
midmohandyman.com
logopaedie-blomberg.de
twohourswithlena.wordpress.com
slimidealherbal.com
pointos.com
corona-handles.com
hexcreatives.co
ventti.com.ar
bbsmobler.se
cerebralforce.net
ncuccr.org
celularity.com
exenberger.at
extensionmaison.info
nicoleaeschbachorg.wordpress.com
tanzprojekt.com
danubecloud.com
roadwarrior.app
deoudedorpskernnoordwijk.nl
imaginado.de
kikedeoliveira.com
servicegsm.net
slupetzky.at
upplandsspar.se
gporf.fr
sachnendoc.com
8449nohate.org
carriagehousesalonvt.com
phantastyk.com
iyengaryogacharlotte.com
sterlingessay.com
easytrans.com.au
dontpassthepepper.com
kampotpepper.gives
blumenhof-wegleitner.at
irinaverwer.com
thaysa.com
todocaracoles.com
marketingsulweb.com
coding-marking.com
craigvalentineacademy.com
enovos.de
dw-css.de
figura.team
icpcnj.org
tstaffing.nl
lmtprovisions.com
ulyssemarketing.com
lukeshepley.wordpress.com
autofolierung-lu.de
dubnew.com
cimanchesterescorts.co.uk
kaotikkustomz.com
mymoneyforex.com
ilive.lt
notmissingout.com
reddysbakery.com
vancouver-print.ca
delchacay.com.ar
anthonystreetrimming.com
toreria.es
embracinghiscall.com
binder-buerotechnik.at
christ-michael.net
wari.com.pe
mediaacademy-iraq.org
hoteledenpadova.it
smithmediastrategies.com
321play.com.hk
fransespiegels.nl
ai-spt.jp
brawnmediany.com
extraordinaryoutdoors.com
cortec-neuro.com
victoriousfestival.co.uk
vermoote.de
onlyresultsmarketing.com
macabaneaupaysflechois.com
boisehosting.net
microcirc.net
danskretursystem.dk
agence-chocolat-noir.com
htchorst.nl
wasmachtmeinfonds.at
schoolofpassivewealth.com
autopfand24.de
bundabergeyeclinic.com.au
jolly-events.com
tandartspraktijkhartjegroningen.nl
femxarxa.cat
naturalrapids.com
simpkinsedwards.co.uk
urmasiimariiuniri.ro
aco-media.nl
jusibe.com
botanicinnovations.com
hugoversichert.de
psnacademy.in
brevitempore.net
stemplusacademy.com
degroenetunnel.com
theletter.company
tastewilliamsburg.com
ralister.co.uk
bowengroup.com.au
igorbarbosa.com
echtveilig.nl
firstpaymentservices.com
meusharklinithome.wordpress.com
sagadc.com
operaslovakia.sk
foretprivee.ca
insidegarage.pl
cyntox.com
rebeccarisher.com
aminaboutique247.com
pubweb.carnet.hr
michaelsmeriglioracing.com
rimborsobancario.net
smejump.co.th
architekturbuero-wagner.net
alfa-stroy72.com
pixelarttees.com
mrsplans.net
bloggyboulga.net
accountancywijchen.nl
cwsitservices.co.uk
scenepublique.net
vanswigchemdesign.com
sevenadvertising.com
streamerzradio1.site
iqbalscientific.com
abogadosadomicilio.es
nachhilfe-unterricht.com
darrenkeslerministries.com
real-estate-experts.com
mousepad-direkt.de
farhaani.com
love30-chanko.com
abl1.net
launchhubl.com
elimchan.com
kisplanning.com.au
bridgeloanslenders.com
visiativ-industry.fr
parebrise-tla.fr
web.ion.ag
mbxvii.com
unim.su
kamienny-dywan24.pl
rocketccw.com
creamery201.com
fitnessbazaar.com
porno-gringo.com
trulynolen.co.uk
iphoneszervizbudapest.hu
layrshift.eu
smale-opticiens.nl
spylista.com
autodujos.lt
tampaallen.com
garage-lecompte-rouen.fr
vitavia.lt
12starhd.online
boompinoy.com
irishmachineryauctions.com
people-biz.com
jyzdesign.com
stoeferlehalle.de
tarotdeseidel.com
galserwis.pl
assurancesalextrespaille.fr
space.ua
smalltownideamill.wordpress.com
blogdecachorros.com
ianaswanson.com
greenpark.ch
gasbarre.com
stemenstilte.nl
ikads.org
zervicethai.co.th
bingonearme.org
zflas.com
hypozentrum.com
jobcenterkenya.com
rozemondcoaching.nl
stingraybeach.com
tanciu.com
miriamgrimm.de
alten-mebel63.ru
blood-sports.net
ziegler-praezisionsteile.de
ruralarcoiris.com
carlosja.com
girlillamarketing.com
ra-staudte.de
limassoldriving.com
maureenbreezedancetheater.org
poultrypartners.nl
krcove-zily.eu
handi-jack-llc.com
broseller.com
southeasternacademyofprosthodontics.org
braffinjurylawfirm.com
madinblack.com
bunburyfreightservices.com.au
ahouseforlease.com
biapi-coaching.fr
365questions.org
paymybill.guru
plantag.de
polzine.net
rksbusiness.com
pmcimpact.com
uimaan.fi
bouncingbonanza.com
dirittosanitario.biz
aprepol.com
art2gointerieurprojecten.nl
seminoc.com
beaconhealthsystem.org
ncid.bc.ca
gratispresent.se
waermetauscher-berechnen.de
licor43.de
westdeptfordbuyrite.com
milanonotai.it
latestmodsapks.com
upmrkt.co
rollingrockcolumbia.com
pcprofessor.com
entopic.com
siluet-decor.ru
catholicmusicfest.com
herbstfeststaefa.ch
dr-tremel-rednitzhembach.de
dushka.ua
crowcanyon.com
dlc.berlin
solinegraphic.com
classycurtainsltd.co.uk
qualitaetstag.de
beautychance.se
parkcf.nl
maxadams.london
bookspeopleplaces.com
tecnojobsnet.com
schmalhorst.de
besttechie.com
rerekatu.com
lapinlviasennus.fi
creative-waves.co.uk
y-archive.com
kadesignandbuild.co.uk
daklesa.de
mountaintoptinyhomes.com
mooreslawngarden.com
bodyfulls.com
beyondmarcomdotcom.wordpress.com
readberserk.com
otto-bollmann.de
nakupunafoundation.org
dutchcoder.nl
woodleyacademy.org
webhostingsrbija.rs
argenblogs.com.ar
sojamindbody.com
romeguidedvisit.com
mikeramirezcpa.com
elpa.se
the-virtualizer.com
1kbk.com.ua
berliner-versicherungsvergleich.de
no-plans.com
financescorecard.com
planchaavapor.net
theduke.de
odiclinic.org
vannesteconstruct.be
sofavietxinh.com
www1.proresult.no
purposeadvisorsolutions.com
sabel-bf.com
samnewbyjax.com
almosthomedogrescue.dog
perbudget.com
psa-sec.de
mrsfieldskc.com
bargningharnosand.se
kedak.de
global-kids.info
bordercollie-nim.nl
siliconbeach-realestate.com
pomodori-pizzeria.de
olejack.ru
bradynursery.com
mediaplayertest.net
castillobalduz.es
vloeren-nu.nl
profectis.de
mepavex.nl
tonelektro.nl
artallnightdc.com
softsproductkey.com
kidbucketlist.com.au
caffeinternet.it
portoesdofarrobo.com
x-ray.ca
biortaggivaldelsa.com
saka.gr
insp.bi
bigbaguettes.eu
wien-mitte.co.at
galleryartfair.com
tux-espacios.com
plotlinecreative.com
cityorchardhtx.com
hmsdanmark.dk
trystana.com
groupe-frayssinet.fr
teczowadolina.bytom.pl
vetapharma.fr
ateliergamila.com
kaminscy.com
transliminaltribe.wordpress.com
manifestinglab.com
senson.fi
first-2-aid-u.com
parkstreetauto.net
filmstreamingvfcomplet.be
live-con-arte.de
camsadviser.com
consultaractadenacimiento.com
atalent.fi
thee.network
lapinvihreat.fi
ledmes.ru
bierensgebakkramen.nl
modestmanagement.com
arteservicefabbro.com
makeitcount.at
bildungsunderlebnis.haus
ungsvenskarna.se
insigniapmg.com
mezhdu-delom.ru
jsfg.com
yassir.pro
artotelamsterdam.com
tomaso.gr
allfortheloveofyou.com
pawsuppetlovers.com
atmos-show.com
partnertaxi.sk
smessier.com
n1-headache.com
hkr-reise.de
moveonnews.com
boulderwelt-muenchen-west.de
tinyagency.com
international-sound-awards.com
nmiec.com
krlosdavid.com
smokeysstoves.com
2ekeus.nl
mooshine.com
pmc-services.de
all-turtles.com
spd-ehningen.de
101gowrie.com
zso-mannheim.de
neuschelectrical.co.za
evergreen-fishing.com
saarland-thermen-resort.com
heidelbergartstudio.gallery
toponlinecasinosuk.co.uk
nandistribution.nl
uranus.nl
fotoideaymedia.es
drfoyle.com
asiluxury.com
xltyu.com
ampisolabergeggi.it
lykkeliv.net
abogadoengijon.es
miraclediet.fun
promalaga.es
herbayupro.com
pocket-opera.de
schoellhammer.com
4youbeautysalon.com
modelmaking.nl
euro-trend.pl
caribdoctor.org
aarvorg.com
koko-nora.dk
loprus.pl
lachofikschiet.nl
homecomingstudio.com
associacioesportivapolitg.cat
newyou.at
shadebarandgrillorlando.com
judithjansen.com
conasmanagement.de
wolf-glas-und-kunst.de
faizanullah.com
dr-pipi.de
jiloc.com
antenanavi.com
piajeppesen.dk
asgestion.com
dutchbrewingcoffee.com
forskolorna.org
helenekowalsky.com
maasreusel.nl
pv-design.de
nativeformulas.com
quizzingbee.com
makeflowers.ru
basisschooldezonnewijzer.nl
deepsouthclothingcompany.com
ravensnesthomegoods.com
tennisclubetten.nl
justinvieira.com
zimmerei-fl.de
huehnerauge-entfernen.de
paulisdogshop.de
tenacitytenfold.com
nhadatcanho247.com
ecopro-kanto.com
theshungiteexperience.com.au
bristolaeroclub.co.uk
puertamatic.es
richard-felix.co.uk
sandd.nl
modamilyon.com
ilso.net
highlinesouthasc.com
denifl-consulting.at
muamuadolls.com
sportverein-tambach.de
outcomeisincome.com
parks-nuernberg.de
funjose.org.gt
campus2day.de
stormwall.se
amerikansktgodis.se
chaotrang.com
gamesboard.info
work2live.de
vihannesporssi.fi
charlottepoudroux-photographie.fr
lescomtesdemean.be
ihr-news.jp
verbisonline.com
associationanalytics.com
stacyloeb.com
wsoil.com.sg
teknoz.net
seitzdruck.com
jerling.de
hairstylesnow.site
comarenterprises.com
dezatec.es
mir-na-iznanku.com
spargel-kochen.de
resortmtn.com
gastsicht.de
praxis-management-plus.de
desert-trails.com
expandet.dk
centrospgolega.com
erstatningsadvokaterne.dk
glennroberts.co.nz
iwr.nl
talentwunder.com
lillegrandpalais.com
mrtour.site
daniel-akermann-architektur-und-planung.ch
lloydconstruction.com
devlaur.com
blgr.be
cafemattmeera.com
kariokids.com
sweering.fr
intecwi.com
fannmedias.com
admos-gleitlager.de
mediaclan.info
grelot-home.com
journeybacktolife.com
plastidip.com.ar
rehabilitationcentersinhouston.net
kafu.ch
vickiegrayimages.com
kindersitze-vergleich.de
thomas-hospital.de
securityfmm.com
bestbet.com
mank.de
id-vet.com
dareckleyministries.com
iviaggisonciliegie.it
heliomotion.com
ymca-cw.org.uk
abitur-undwieweiter.de
verytycs.com
kuntokeskusrok.fi
supportsumba.nl
waywithwords.net
nvwoodwerks.com
noesis.tech
solhaug.tk
norovirus-ratgeber.de
pasvenska.se
xn--logopdie-leverkusen-kwb.de
edgewoodestates.org
sobreholanda.com
thefixhut.com
vibethink.net
igfap.com
rhinosfootballacademy.com
lorenacarnero.com
merzi.info
liikelataamo.fi
levihotelspa.fi
mardenherefordshire-pc.gov.uk
norpol-yachting.com
citymax-cr.com
otsu-bon.com
corola.es
carrybrands.nl
notsilentmd.org
berlin-bamboo-bikes.org
live-your-life.jp
carolinepenn.com
alysonhoward.com
cirugiauretra.es
dsl-ip.de
julis-lsa.de
simulatebrain.com
allamatberedare.se
liliesandbeauties.org
rota-installations.co.uk
d1franchise.com
narcert.com
montrium.com
knowledgemuseumbd.com
allentownpapershow.com
fiscalsort.com
qlog.de
calabasasdigest.com
sauschneider.info
kissit.ca
argos.wityu.fund
malychanieruchomoscipremium.com
ligiercenter-sachsen.de
shhealthlaw.com
deltacleta.cat
projetlyonturin.fr
jakekozmor.com
klusbeter.nl
alhashem.net
evologic-technologies.com
villa-marrakesch.de
prochain-voyage.net
frontierweldingllc.com
haremnick.com
markelbroch.com
precisionbevel.com
conexa4papers.trade
tradiematepro.com.au
travelffeine.com
haar-spange.com
zonamovie21.net
yousay.site
kirkepartner.dk
seevilla-dr-sturm.at
advokathuset.dk
katiekerr.co.uk
commercialboatbuilding.com
xn--singlebrsen-vergleich-nec.com
havecamerawilltravel2017.wordpress.com
thailandholic.com
songunceliptv.com
klimt2012.info
balticdermatology.lt
jandaonline.com
parking.netgateway.eu
unetica.fr
interactcenter.org
myhealth.net.au
huesges-gruppe.de
turkcaparbariatrics.com
higadograsoweb.com
quemargrasa.net
ecoledansemulhouse.fr
pasivect.co.uk
polychromelabs.com
systemate.dk
hihaho.com
panelsandwichmadrid.es
gemeentehetkompas.nl
birnam-wood.com
ncs-graphic-studio.com
triactis.com
alsace-first.com
levdittliv.se
makeurvoiceheard.com
penco.ie
oncarrot.com
whyinterestingly.ru
forestlakeuca.org.au
campusoutreach.org
apprendrelaudit.com
marietteaernoudts.nl
comparatif-lave-linge.fr
candyhouseusa.com
shsthepapercut.com
charlesreger.com
div-vertriebsforschung.de
latribuessentielle.com
polymedia.dk
bogdanpeptine.ro
hardinggroup.com
jbbjw.com
ausair.com.au
harpershologram.wordpress.com
spectrmash.ru
fatfreezingmachines.com
bayoga.co.uk
aakritpatel.com
d2marketing.co.uk
myhostcloud.com
manijaipur.com
idemblogs.com
zenderthelender.com
hotelzentral.at
sla-paris.com
drnice.de
bouquet-de-roses.com
woodworkersolution.com
maryloutaylor.com
jameskibbie.com
zewatchers.com
lbcframingelectrical.com
deko4you.at
nuzech.com
presseclub-magdeburg.de
nataschawessels.com
zieglerbrothers.de
highimpactoutdoors.net
kojima-shihou.com
lusak.at
advizewealth.com
gw2guilds.org
gasolspecialisten.se
strandcampingdoonbeg.com
slwgs.org
actecfoundation.org
symphonyenvironmental.com
nancy-informatique.fr
drinkseed.com
yourobgyn.net
dinslips.se
wraithco.com
saxtec.com
chavesdoareeiro.com
naturavetal.hr
smhydro.com.pl
dublikator.com
geekwork.pl
oldschoolfun.net
directwindowco.com
stopilhan.com
troegs.com
xtptrack.com
blog.solutionsarchitect.guru
kamahouse.net
xlarge.at
instatron.net
educar.org
-
net
true
-
pid
$2a$10$QV..IaQ6B9QV724W3myufeRDO8uuVgVqGSa6eDWdTrsJ1a32XBdh.
-
prc
firefox
sql
outlook
ocomm
dbeng50
ocautoupds
mydesktopservice
sqbcoreservice
steam
thebat
isqlplussvc
oracle
onenote
mydesktopqos
tbirdconfig
visio
msaccess
excel
synctime
xfssvccon
thunderbird
wordpad
dbsnmp
powerpnt
infopath
mspub
agntsvc
winword
ocssd
encsvc
-
ransom_oneliner
Soon you may lose your files FOREVER Find: "readme-{EXT}-NOW.txt" in folders or on your desktop! YOU HAVE A FEW DAYS OR A FILE WILL BE LOST FOREVER !!!
-
ransom_template
Your files are locked due to a vulnerability in your system by "{EXT}" extension. You will not be able to decrypt the files yourself, in the worst case you can destroy the data irreversibly. The only way to unlock your data is to buy the decryption program. Go to the link written below to more details. If you cannot do this yourself, find a data recovery company in internet. They cannot help you unlock your data, because only we have decryption key, but will help you make a payment and provide you guarantees. ATTENTION! DATA RECOVERY AGENCIES WORK AND DURING THE CORONOVIRUS QUARANTINE, THEY WILL HELP YOU REMOTE. Also, I ask you to note, you have no long time, if you do not make payment soon, the price for the decryptor will double. So I recommend you dont waste time and move! Go to the page through the browser: http://decryptor.cc/{UID} If your site does not open, then download the "TOR Browser" (https://torproject.org/). If you cannot access the download page of the "TOR Browser", then download the VPN! After installing "TOR Browser", open it and follow the link: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} After going to the site, enter the following code: {KEY}
-
sub
4402
-
svc
svc$
mepocs
memtas
backup
sql
veeam
vss
sophos
Extracted
C:\Users\readme-j008b4a42n-NOW.txt
http://decryptor.cc/71639715C427C907
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/71639715C427C907
Extracted
C:\Users\readme-o331102-NOW.txt
http://decryptor.cc/F16494BF17DAA819
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/F16494BF17DAA819
Targets
-
-
Target
63ae6ca6853552716571555546833d99_JaffaCakes118
-
Size
166KB
-
MD5
63ae6ca6853552716571555546833d99
-
SHA1
09e37e98a74ec8edb36b22a4eb51dbed4390544a
-
SHA256
9d3a482d9441876096e0cee429fedf7b9f7e1c6a50b3e4b2009884019627d879
-
SHA512
087baf5fbf764f480f384cbdee878d3dfb8b3880f378b4597d5e292f392341e5da196ee2232a441c6268b7760afffdde293f35f536ee55cff4992b4b45238f86
-
SSDEEP
1536:EOYMGzUt2Z+tRvSKGNkR87Kk9VWvDtwVQKeDZz0TDsTR6wss+oJ27b5EIBNUup7E:EJMawtnGqtWoKeZC62aoNUSncZUw+S3
Score10/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
Sets desktop wallpaper using registry
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1