General
-
Target
6bf8720c0741f11219f38e747392b73e_JaffaCakes118
-
Size
164KB
-
Sample
240523-xr2r7acg4t
-
MD5
6bf8720c0741f11219f38e747392b73e
-
SHA1
73030215c499f6908f418266bc1c522fdc2462df
-
SHA256
1e1589de70ea7ebad976aa1c1ebdb32e0695ee268aa5f7f8ac834ed3960a4803
-
SHA512
b90e78c1e011ac347b9fd86e6415312a242854f84a1a0956c513333819a6bba773e5ec74afaeaf374c05410a88bb54d22f48c1de7682e21a9bd961387c62379e
-
SSDEEP
3072:BrX1t2U05pbJ5xhxY9doh7O79siUs/Na2ez+SKnTLBvA:BrltH05f5v2i7O93Nde7cT
Behavioral task
behavioral1
Sample
6bf8720c0741f11219f38e747392b73e_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6bf8720c0741f11219f38e747392b73e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Extracted
sodinokibi
39
2350
arazi.eus
amco.net.au
peppergreenfarmcatering.com.au
cymru.futbol
rs-danmark.dk
drvoip.com
aheadloftladders.co.uk
vapiano.fr
geitoniatonaggelon.gr
physio-lang.de
worldproskitour.com
voetbalhoogeveen.nl
eshop.design
stanleyqualitysystems.com
haus-landliebe.de
cssp-mediation.org
buerocenter-butzbach-werbemittel.de
kamin-somnium.de
annida.it
sambaglow.com
customroasts.com
hm-com.com
kartuindonesia.com
acornishstudio.co.uk
latteswithleslie.com
aktivfriskcenter.se
lyricalduniya.com
georgemuncey.com
agrifarm.dk
letterscan.de
olry-cloisons.fr
breakluckrecords.com
digitale-elite.de
maryairbnb.wordpress.com
schluesseldienste-hannover.de
irizar.com
thesilkroadny.com
avisioninthedesert.com
oththukaruva.com
transifer.fr
johnstonmingmanning.com
almamidwifery.com
teamsegeln.ch
insane.agency
valiant-voice.com
palmecophilippines.com
augen-praxisklinik-rostock.de
skyboundnutrition.co.uk
xn--billigafrgpatroner-stb.se
buffdaddyblog.com
lumturo.academy
brunoimmobilier.com
happycatering.de
sarahspics.co.uk
dogsunlimitedguide.com
bringmehope.org
oportowebdesign.com
optigas.com
lifeinbreaths.com
chorusconsulting.net
humanviruses.org
liepertgrafikweb.at
harleystreetspineclinic.com
osn.ro
janellrardon.com
so-sage.fr
dennisverschuur.com
concontactodirecto.com
mind2muscle.nl
christopherhannan.com
ufovidmag.com
catalyseurdetransformation.com
renderbox.ch
m2graph.fr
aceroprime.com
chainofhopeeurope.eu
axisoflove.org:443
from02pro.com
midwestschool.org
campusescalade.com
richardkershawwines.co.za
bluetenreich-brilon.de
casinodepositors.com
kenmccallum.com
nginx.com
lagschools.ng
adterium.com
directique.com
endstarvation.com
testitjavertailut.net
groovedealers.ru
rvside.com
xn--80addfr4ahr.dp.ua
rentingwell.com
fidelitytitleoregon.com
uncensoredhentaigif.com
schulz-moelln.de
justaroundthecornerpetsit.com
ikzoekgod.be
michal-s.co.il
centuryvisionglobal.com
jimprattmediations.com
karelinjames.com
piestar.com
afbudsrejserallinclusive.dk
funworx.de
tramadolhealth.com
globalcompliancenews.com
hawthornsretirement.co.uk
annenymus.com
bagaholics.in
handyman-silkeborg.dk
mgimalta.com
hotelturbo.de
qrs-international.com
kelsigordon.com
lsngroupe.com
switch-made.com
theboardroomafrica.com
achetrabalhos.com
craftstone.co.nz
auberives-sur-vareze.fr
pubcon.com
skidpiping.de
blucamp.com
mediogiro.com.ar
lashandbrowenvy.com
texanscan.org
slotspinner.com
neolaiamedispa.com
larchwoodmarketing.com
zdrowieszczecin.pl
zealcon.ae
denverwynkoopdentist.com
jeanmonti.com
alwaysdc.com
bookingwheel.com
professionetata.com
dr-vita.de
clinic-beethovenstrasse-ag.ch
hawaiisteelbuilding.com
bd2fly.com
nepal-pictures.com
voice2biz.com
limounie.com
mondolandscapes.com
activeterroristwarningcompany.com
mslp.org
albcleaner.fr
banukumbak.com
imagine-entertainment.com
rokthetalk.com
napisat-pismo-gubernatoru.ru:443
cardsandloyalty.com
mbuildinghomes.com
deziplan.ru
wineandgo.hu
ya-elka.ru
pixelhealth.net
factorywizuk.com
spirello.nl
cc-experts.de
eyedoctordallas.com
thisprettyhair.com
mensemetgesigte.co.za
mayprogulka.ru
tweedekansenloket.nl
redctei.co
tastevirginia.com
spectamarketingdigital.com.br
xn--ziinoapte-6ld.ro
innovationgames-brabant.nl
advance-refle.com
jalkapuu.net
citiscapes-art.com
epsondriversforwindows.com
matteoruzzaofficial.com
chomiksy.net
alharsunindo.com
juergenblaetz.de
quitescorting.com
naukaip.ru
sber-biznes.com
the5thquestion.com
edvestors.org
stathmoulis.gr
leopoldineroux.com
animation-pro.co.uk
envomask.com
neonodi.be
agencewho-aixenprovence.fr
renehartman.nl
pinthelook.com
molade.nl
vvego.com
malevannye.ru
rename.kz
greeneyetattoo.com
rishigangoly.com
diverfiestas.com.es
ruggestar.ch
mrcar.nl
cesep2019.com
fotoeditores.com
glennverschueren.be
entdoctor-durban.com
alene.co
alcye.com
the3-week-diet.net
altocontatto.net
manzel.tn
dentourage.com
n-newmedia.de
invela.dk
interlinkone.com
triplettagaite.fr
global-migrate.com
drbrianhweeks.com
barbaramcfadyenjewelry.com
lgiwines.com
nrgvalue.com
o90.dk
bodymindchallenger.com
girlish.ae
jobscore.com
futurenetworking.com
photonag.com
penumbuhrambutkeiskei.com
palema.gr
levencovka.ru
blueridgeheritage.com
miscbo.it
9nar.com
adabible.org
koncept-m.ru
shrinkingplanet.com
mindsparkescape.com
spacebel.be
arthakapitalforvaltning.dk
hinotruckwreckers.com.au
carolynfriedlander.com
pankiss.ru
boomerslivinglively.com
myplaywin3.com
buonabitare.com
bcabattoirs.org
evsynthacademy.org
springfieldplumbermo.com
trivselsguide.dk
masecologicos.com
scietech.academy
dantreranch.com
ygallerysalonsoho.com:443
teutoradio.de
metriplica.academy
patriotcleaning.net
epicjapanart.com
licensed-public-adjuster.com
gatlinburgcottage.com
mazift.dk
colored-shelves.com
p-ride.live
singletonfinancial.com
reizenmetkinderen.be
pro-gamer.pl
paardcentraal.nl
heuvelland-oaze.nl
ciga-france.fr
andermattswisswatches.ch
gavelmasters.com
min-virksomhed.dk
broccolisoep.nl
cormanmarketing.com
egpu.fr
rentsportsequip.com
tages-geldvergleich.de
thehovecounsellingpractice.co.uk
michaelfiegel.com
husetsanitas.dk
signededenroth.dk
ronaldhendriks.nl
pourlabretagne.bzh
ikadomus.com
collegetennis.info
datatri.be
ketomealprep.academy
stringnosis.academy
oraweb.net
stagefxinc.com
beandrivingschool.com.au
leadforensics.com
ludoil.it
mike.matthies.de
finnergo.eu
chris-anne.com
t3brothers.com
legundschiess.de
der-stempelking.de
dinedrinkdetroit.com
precisetemp.com
amorbellezaysalud.com
cotton-avenue.co.il
dcc-eu.com
lunoluno.com
startuplive.org
goodboyscustom.com
ledyoucan.com
triavlete.com
altitudeboise.com
janmorgenstern.com
bumbipdeco.site
weddingceremonieswithtim.com
kookooo.com
myfbateam.com
kiraribeaute-nani.com
innersurrection.com
proffteplo.com
alpesiberie.com
adaduga.info
welovecustomers.fr
speiserei-hannover.de
wribrazil.com
kristianboennelykke.dk
four-ways.com
fluzfluzrewards.com
billyoart.com
speakaudible.com
imaginekithomes.co.nz
strauchs-wanderlust.info
cac2040.com
tanatek.com
edrickennedymacfoy.com
thepixelfairy.com
kombi-dress.com
tradenavigator.ch
poems-for-the-soul.ch
suitesartemis.gr
zaczytana.com
advanced-removals.co.uk
fotoslubna.com
magnetvisual.com
apmollerpension.com
carsten.sparen-it.de
scotlandsroute66.co.uk
reputation-medical.online
queertube.net
vipcarrental.ae
kuriero.pro
berdonllp.com
anchelor.com
efficiencyconsulting.es
leatherjees.com
initconf.com
richardmaybury.co.uk
hotjapaneselesbian.com
bg.szczecin.pl
indiebizadvocates.org
topautoinsurers.net
fascaonline.com
traitware.com
solutionshosting.co.uk
descargandoprogramas.com
abulanov.com
smartercashsystem.com
nourella.com
deduktia.fi
drbenveniste.com
antesacademy.it
nieuwsindeklas.be
onlinetvgroup.com
kryptos72.com
atrgroup.it
oro.ae
avis.mantova.it
ronielyn.com
otpusk.zp.ua
verbouwingsdouche.nl
limmortelyouth.com
ntinasfiloxenia.gr
fbmagazine.ru
elliemaccreative.wordpress.com
stitch-n-bitch.com
jag.me
malzomattalar.com
opt4cdi.com
ahgarage.com
baikalflot.ru
hostaletdelsindians.es
delegationhub.com
lisa-poncon.fr
hoteltantra.com
publicompserver.de
katherinealy.com
mundo-pieces-auto.fr
selected-minds.de
fsbforsale.com
animalfood-online.de
placermonticello.com
newonestop.com
wallflowersandrakes.com
rarefoods.ro
docarefoundation.org
tzn.nu
phukienbepthanhdat.com
wordpress.idium.no
boyfriendsgoal.site
gazelle-du-web.com
smartworkplaza.com
ncn.nl
zuerich-umzug.ch
motocrosshideout.com
hospitalitytrainingsolutions.co.uk
matthieupetel.fr
rapid5kloan.org
enactusnhlstenden.com
uci-france.fr
rubyaudiology.com
thestudio.academy
gsconcretecoatings.com
bonitabeachassociation.com
advesa.com
phoenixcrane.com
schroederschoembs.com
tbalp.co.uk
claudiakilian.de
bychowo.pl
babysitting-hk.helpergo.co
iexpert99.com
alltagsrassismus-entknoten.de
skooppi.fi
pajagus.fr
smartspeak.com
hutchstyle.co.uk
forskolinslimeffect.net
frameshift.it
goddardleadership.org
lapponiasafaris.com
molinum.pt
topvijesti.net
salonlamar.nl
spartamovers.com
lesyeuxbleus.net
asiaartgallery.jp
redpebblephotography.com
craftingalegacy.com
ced-elec.com
1deals.com
yayasanprimaunggul.org
paradigmlandscape.com
alisodentalcare.com
sytzedevries.com
espaciopolitica.com
iron-mine.ru
bourchier.org
bridalcave.com
bellesiniacademy.org
gosouldeep.com
alattekniksipil.com
leansupremegarcinia.net
campusce.com
successcolony.com.ng
dieetuniversiteit.nl
mindfuelers.com
graygreenbiomedservices.com
3daywebs.com
mjk.digital
racefietsenblog.nl
mediahub.co.nz
pazarspor.org.tr
k-zubki.ru
pilotgreen.com
bajova.sk
ncjc.ca
condormobile.fr
perceptdecor.com
nevadaruralhousingstudies.org
mneti.ru
metroton.ru
tetameble.pl
thenalpa.com
cp-bap.de
aberdeenartwalk.org
stage-infirmier.fr
kosten-vochtbestrijding.be
loysonbryan.com
universelle.fr
rolleepollee.com
ownidentity.com
cap29010.it
biketruck.de
artcase.pl
atma.nl
craftron.com
jlwilsonbooks.com
smartmind.net
computer-place.de
pokemonturkiye.com
santastoy.store
furland.ru
energosbit-rp.ru
parentsandkids.com
devus.de
the-cupboard.co.uk
rhino-storage.co.uk
krishnabrawijaya.com
mieleshopping.it
cascinarosa33.it
ilovefullcircle.com
orchardbrickwork.com
soundseeing.net
studionumerik.fr
sealgrinderpt.com
lmmont.sk
rivermusic.nl
azloans.com
tothebackofthemoon.com
denhaagfoodie.nl
agriturismocastagneto.it
banksrl.co.za
magrinya.net
111firstdelray.com
polynine.com
dinecorp.com
jax-interim-and-projectmanagement.com
gaearoyals.com
therapybusinessacademy.com
finsahome.co.uk
stralsund-ansichten.de
arabianmice.com
jglconsultancy.com
brinkdoepke.eu
grafikstudio-visuell.de
tieronechic.com
bescomedical.de
airvapourbarrier.com
paprikapod.com
chatberlin.de
eafx.pro
artvark.nl
designimage.ae
witraz.pl
ingresosextras.online
specialtyhomeservicesllc.com
lollachiro.com
bjornvanvulpen.nl
andrealuchesi.it
satoblog.org
muni.pe
etgdogz.de
forextimes.ru
biblica.com
primemarineengineering.com
rsidesigns.com
mesajjongeren.nl
rattanwarehouse.co.uk
unboxtherapy.site
theatre-embellie.fr
astrographic.com
awag-blog.de
ceocenters.com
wademurray.com
mazzaropi.com.br
bodet150ans.com
dentallabor-luenen.de
rino-gmbh.com
glende-pflanzenparadies.de
bayshoreelite.com
sppdstats.com
aquacheck.co.za
forumsittard.nl
toranjtuition.org
eurethicsport.eu
advancedeyecare.com
belinda.af
itheroes.dk
photographycreativity.co.uk
sycamoregreenapts.com
mahikuchen.com
cuadc.org
mangimirossana.it
metallbau-hartmann.eu
yuanshenghotel.com
tilldeeke.de
vitoriaecoturismo.com.br
stressreliefadvice.com
corporacionrr.com
ivancacu.com
die-immo-agentur.de
citydogslife.com
factoriareloj.com
terraflair.de
veggienessa.com
sharonalbrightdds.com
premier-iowa.com
alaskaremote.com
keuken-prijs.nl
mollymccarthydesign.com
lattalvor.com
cxcompany.com
memphishealthandwellness.com
fanuli.com.au
watchsale.biz
techybash.com
solidhosting.nl
yvesdoin-aquarelles.fr
ravage-webzine.nl
nationnewsroom.com
jaaphoekzema.nl
g2mediainc.com
randyabrown.com
charlottelhanna.com
thegetawaycollective.com
coachpreneuracademy.com
gta-jjb.fr
11.in.ua
signamedia.de
reygroup.pt
grupoexin10.com
hnkns.com
bakingismyyoga.com
pureelements.nl
tecleados.com
look.academy
burg-zelem.de
cmeow.com
oscommunity.de
go.labibini.ch
nauticmarine.dk
purepreprod4.com
mrmac.com
fridakids.com
ramirezprono.com
ayudaespiritualtamara.com
dibli.store
vdolg24.online
endlessrealms.net
geoweb.software
heimdalbygg.no
atelierkomon.com
latableacrepes-meaux.fr
suonenjoen.fi
turing.academy
logosindustries.com
alabamaroofingllc.com
saboboxtel.uk
jayfurnitureco.com
christianscholz.de
saint-malo-developpement.fr
radishallgood.com
internestdigital.com
sochi-okna23.ru
leloupblanc.gr
lovcase.com
loparnille.se
bcmets.info
2020hindsight.info
nxtstg.org
mikegoodfellow.co.uk
medicalsupportco.com
opticahubertruiz.com
awaitspain.com
peninggibadan.co.id
donau-guides.eu
muller.nl
bertbutter.nl
secrets-clubs.co.uk
airserviceunlimited.com
angelsmirrorus.com
birthplacemag.com
yourcosmicbeing.com
scentedlair.com
sweetz.fr
hameghlim.com
volta.plus
tesisatonarim.com
electricianul.com
crestgood.com
eos-horlogerie.com
thegrinningmanmusical.com
saberconcrete.com
dayenne-styling.nl
circuit-diagramz.com
jobstomoveamerica.org
subyard.com
slideevents.be
istantidigitali.com
belofloripa.be
betterce.com
palmenhaus-erfurt.de
wg-heiligenstadt.de
johnkoen.com
line-x.co.uk
parseport.com
eksperdanismanlik.com
fta-media.com
tatyanakopieva.ru
omnicademy.com
ziliak.com
beauty-traveller.com
pays-saint-flour.fr
focuskontur.com
bruut.online
letsstopsmoking.co.uk
cookinn.nl
mrkluttz.com
tellthebell.website
distrifresh.com
devplus.be
cincinnatiphotocompany.org
cainlaw-okc.com
klapanvent.ru
sjtpo.org
framemyballs.com
skoczynski.eu
raeoflightmusic.com
the-beauty-guides.com
wirmuessenreden.com
hostingbangladesh.net
jmmartinezilustrador.com
towelroot.co
holocine.de
sprintcoach.com
foerderverein-vatterschule.de
csaballoons.com
nykfdyrehospital.dk
gratiocafeblog.wordpress.com
yourhappyevents.fr
fitnessblenderstory.com
subquercy.fr
ilveshistoria.com
khtrx.com
martinipstudios.com
rozmata.com
ox-home.com
projektparkiet.pl
drnelsonpediatrics.com
biodentify.ai
chinowarehousespace.com
globalskills.pt
janasfokus.com
onesynergyinternational.com
druktemakersheerenveen.nl
floweringsun.org
motocrossplace.co.uk
scholarquotes.com
benchbiz.com
lexced.com
autoteamlast.de
linearete.com
kdbrh.com
sachainchiuk.com
arearugcleaningnyc.com
gurutechnologies.net
sbit.ag
cmascd.com
trevi-vl.ru
noda.com.ua
fann.ru
wyreforest.net
agenceassemble.fr
bulyginnikitav.000webhostapp.com
moira-cristescu.com
90nguyentuan.com
daveystownhouse.com
clemenfoto.dk
morgansconsult.com
bundan.com
nvisionsigns.com
qandmmusiccenter.com
mac-computer-support-hamburg.de
andreaskildegaard.dk
hvitfeldt.dk
goodherbalhealth.com
fskhjalmar.se
skyscanner.ro
greatofficespaces.net
jandhpest.com
sshomme.com
fi-institutionalfunds.com
landgoedspica.nl
brisbaneosteopathic.com.au
akcadagofis.com
jonnyhooley.com
shortysspices.com
leijstrom.com
makingmillionaires.net
putzen-reinigen.com
aidanpublishing.co.uk
maxcube24.com.ua
comoserescritor.com
sololibrerie.it
zinnystar.com
kemtron.fr
haard-totaal.nl
mursall.de
nbva.co.uk
slotenmakerszwijndrecht.nl
guohedd.com
laaisterplakky.nl
happylublog.wordpress.com
ijsselbeton.nl
chatterchatterchatter.com
wrinstitute.org
zorgboerderijravensbosch.nl
greenrider.nl
markseymourphotography.co.uk
nepressurecleaning.com
riffenmattgarage.ch
jakubrybak.com
apogeeconseils.fr
jacquesgarcianoto.com
dmlcpa.com
oexebusiness.com
site.markkit.com.br
monstarrsoccer.com
theater-lueneburg.de
acibademmobil.com.tr
natturestaurante.com.br
marcandy.com
angeleyezstripclub.com
liverpoolabudhabi.ae
mediabolmong.com
keyboardjournal.com
frimec-international.es
b3b.ch
expohomes.com
billigeflybilletter.dk
domilivefurniture.com
ddmgen.com
kafkacare.com
laylavalentine.com
webforsites.com
diakonie-weitramsdorf-sesslach.de
internalresults.com
circlecitydj.com
mariajosediazdemera.com
zumrutkuyutemel.com
k-v-f.de
buzzneakers.com
taulunkartano.fi
azerbaycanas.com
modamarfil.com
profibersan.com
levelseven.be
amyandzac.com
elitkeramika-shop.com.ua
bluelakevision.com
awaisghauri.com
block-optic.com
grancanariaregional.com
dnqa.co.uk
blavait.fr
mariannelemenestrel.com
pvandambv.nl
basindentistry.com
livelai.com
soncini.ch
breathebettertolivebetter.com
ykobbqchicken.ca
netadultere.fr
bavovrienden.nl
jdscenter.com
mamajenedesigns.com
billscars.net
rtc24.com
xn--80abehgab4ak0ddz.xn--p1ai
smarttourism.academy
mustangmarketinggroup.com
hartofurniture.com
imajyuku-sozoku.com
housesofwa.com
zwemofficial.nl
fazagostar.co
gbk-tp1.de
encounter-p.net
parksideseniorliving.net
campinglaforetdetesse.com
patassociation.com
silkeight.com
innervisions-id.com
bluemarinefoundation.com
shortsalemap.com
operativadigital.com
utilisacteur.fr
fla.se
victorvictoria.com
skolaprome.eu
eventosvirtualesexitosos.com
pisofare.co
cl0nazepamblog.com
baumfinancialservices.com
davedavisphotos.com
hepishopping.com
rhino-turf.com
omegamarbella.com
ninjaki.com
yournextshoes.com
brighthillgroup.com
askstaffing.com
ideamode.com
thiagoperez.com
iactechnologies.net
margaretmcshane.com
business-basic.de
unexplored.gr
acb-gruppe.ch
allinonecampaign.com
amelielecompte.wordpress.com
hypogenforensic.com
perfectgrin.com
theintellect.edu.pk
adedesign.com
qwikcoach.com
duthler.nl
pansionatblago.ru
bratek-immobilien.de
lookandseen.com
plbinsurance.com
johnsonweekly.com
golfclublandgoednieuwkerk.nl
alnectus.com
elex.is
sveneulberg.de
5thactors.com
apiarista.de
jollity.hu
outstandingminialbums.com
aslog.fr
prometeyagro.com.ua
trainiumacademy.com
auto-opel.ro
walterman.es
hostastay.com
louiedager.com
c-sprop.com
eatyoveges.com
oncarrot.com
kellengatton.com
brannbornfastigheter.se
livedeveloper.com
richardiv.com
bohrlochversicherung.info
kerstliedjeszingen.nl
unislaw-narty.pl
fysiotherapierijnmond.nl
schlagbohrmaschinetests.com
aciscomputers.com
cyberpromote.de
mercadodelrio.com
a-zpaperwork.eu
julielusktherapy.com
simpleitsolutions.ch
nexstagefinancial.com
eastgrinsteadwingchun.com
5pointpt.com
galaniuklaw.com
lidkopingsnytt.nu
kompresory-opravy.com
stabilisateur.fr
sellthewrightway.com
whoopingcrane.com
onlinemarketingsurgery.co.uk
rizplakatjaya.com
prodentalblue.com
charlesfrancis.photos
galatee-couture.com
nutriwell.com.sg
liveyourheartout.co
anleggsregisteret.no
tchernia-conseil.fr
kroophold-sjaelland.dk
jefersonalessandro.com
wasnederland.nl
metcalfe.ca
creohn.de
nicksrock.com
brownswoodblog.com
bubbalucious.com
log-barn.co.uk
triplettabordeaux.fr
vedsegaard.dk
agora-collectivites.com
luvinsburger.fr
hiddensee-buhne11.de
lovetzuchia.com
angelika-schwarz.com
ultimatelifesource.com
fire-space.com
premiumweb.com.ua:443
parisschool.ru
direitapernambuco.com
glas-kuck.de
agendatwentytwenty.com
production-stills.co.uk
aoyama.ac
baita.ac
pinkxgayvideoawards.com
relevantonline.eu
boloria.de
linkbuilding.life
hekecrm.com
bilius.dk
goeppinger-teppichreinigung.de
o2o-academy.com
alexwenzel.de
pxsrl.it
protoplay.ca
nuohous.com
dentalcircle.com
frankgoll.com
karmeliterviertel.com
avtoboss163.ru:443
enews-qca.com
skinkeeper.li
nalliasmali.net
sunsolutions.es
cleanroomequipment.ie
dreamvoiceclub.org
kausette.com
explora.nl
bmw-i-pure-impulse.com
mariamalmahdi.com
baptistdistinctives.org
hensleymarketing.com
silverbird.dk
xrresources.com
jlgraphisme.fr
narca.net
werkzeugtrolley.net
flossmoordental.com
acumenconsultingcompany.com
affligemsehondenschool.be
littlesaints.academy
supercarhire.co.uk
catchup-mag.com
luvbec.com
powershell.su
jameswilliamspainting.com
marmarabasin.com
kickittickets.com
rechtenplicht.be
tutvracks.com
jobkiwi.com.ng
martha-frets-ceramics.nl
profiz.com
catering.com
akwaba-safaris.com
stoneridgemontessori.com
teethinadaydentalimplants.com
web865.com
pedmanson.com
hom-frisor.dk
domaine-des-pothiers.com
promus.ca
bendel-partner.de
kryddersnapsen.dk
cops4causes.org
kvetymichalovce.sk
dierenambulancealkmaar.nl
xtensifi.com
curtsdiscountguns.com
ebible.co
pharmeko-group.com
fixx-repair.com
ocduiblog.com
lassocrm.com
easydental.ae
gardenpartner.pl
test-teleachat.fr
inewsstar.com
rossomattonecase.it
carmel-york.com
vitormmcosta.com
-
net
true
-
pid
39
-
prc
powerpnt
sql
ocautoupds
infopath
steam
ocomm
thunderbird
winword
thebat
dbeng50
firefox
isqlplussvc
mydesktopservice
tbirdconfig
xfssvccon
synctime
visio
dbsnmp
agntsvc
wordpad
excel
mspub
encsvc
sqbcoreservice
onenote
oracle
outlook
msaccess
mydesktopqos
ocssd
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
2350
-
svc
veeam
sql
memtas
sophos
vss
svc$
mepocs
backup
Extracted
C:\Users\tvkh0f-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/3CBAA057DA4B6F66
http://decryptor.top/3CBAA057DA4B6F66
Targets
-
-
Target
6bf8720c0741f11219f38e747392b73e_JaffaCakes118
-
Size
164KB
-
MD5
6bf8720c0741f11219f38e747392b73e
-
SHA1
73030215c499f6908f418266bc1c522fdc2462df
-
SHA256
1e1589de70ea7ebad976aa1c1ebdb32e0695ee268aa5f7f8ac834ed3960a4803
-
SHA512
b90e78c1e011ac347b9fd86e6415312a242854f84a1a0956c513333819a6bba773e5ec74afaeaf374c05410a88bb54d22f48c1de7682e21a9bd961387c62379e
-
SSDEEP
3072:BrX1t2U05pbJ5xhxY9doh7O79siUs/Na2ez+SKnTLBvA:BrltH05f5v2i7O93Nde7cT
Score10/10-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-