General
-
Target
993f7a8655043289c7ef2c74e5d59a6a_JaffaCakes118
-
Size
166KB
-
Sample
240605-zwc1qsac62
-
MD5
993f7a8655043289c7ef2c74e5d59a6a
-
SHA1
51c7653cb3efafbf946d4a853847082ca9f783df
-
SHA256
3338eb73de83e9ab501debbfb28902504af42b7c43490591679267aa59150d51
-
SHA512
d5630a096067272d2057d244d601bdfb74c62319b2e3e4dbcc3a7a669001abe343be360f74b759bb70e9da37397f562aba6195124d1afe893557903a0555896b
-
SSDEEP
3072:LLFrb30BRtBZZg+i2ayy2RjLTuVyu7CJDgoMT3QnFJ05hNl:PJ0BXScFy2RsQJ8zgFJI
Static task
static1
Behavioral task
behavioral1
Sample
993f7a8655043289c7ef2c74e5d59a6a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
993f7a8655043289c7ef2c74e5d59a6a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
sodinokibi
$2a$10$w1jWCB5wnkpakB1gWM5pqesysfsCUtfl.HbQ75TEpMzoH2CneWp..
3476
theletter.company
kingfamily.construction
lefumetdesdombes.com
associationanalytics.com
loprus.pl
fiscalsort.com
micahkoleoso.de
mbxvii.com
hellohope.com
mardenherefordshire-pc.gov.uk
dubnew.com
makeurvoiceheard.com
naturalrapids.com
judithjansen.com
teresianmedia.org
gasbarre.com
onlyresultsmarketing.com
sagadc.com
reddysbakery.com
brawnmediany.com
extensionmaison.info
stoeberstuuv.de
clos-galant.com
spd-ehningen.de
kaliber.co.jp
aunexis.ch
homesdollar.com
patrickfoundation.net
jbbjw.com
poultrypartners.nl
jorgobe.at
irishmachineryauctions.com
filmvideoweb.com
femxarxa.cat
fundaciongregal.org
dublikator.com
calabasasdigest.com
biortaggivaldelsa.com
teczowadolina.bytom.pl
autopfand24.de
pasvenska.se
bloggyboulga.net
365questions.org
geekwork.pl
happyeasterimages.org
abogadosaccidentetraficosevilla.es
offroadbeasts.com
artallnightdc.com
quemargrasa.net
justinvieira.com
kamienny-dywan24.pl
burkert-ideenreich.de
tsklogistik.eu
otto-bollmann.de
birnam-wood.com
i-trust.dk
nativeformulas.com
houseofplus.com
balticdermatology.lt
manijaipur.com
blewback.com
knowledgemuseumbd.com
body-guards.it
shonacox.com
intecwi.com
baptisttabernacle.com
evergreen-fishing.com
transliminaltribe.wordpress.com
wurmpower.at
aminaboutique247.com
craftleathermnl.com
tastewilliamsburg.com
nmiec.com
simoneblum.de
parkcf.nl
linnankellari.fi
liliesandbeauties.org
mikeramirezcpa.com
parkstreetauto.net
fayrecreations.com
werkkring.nl
kaotikkustomz.com
corendonhotels.com
hhcourier.com
waermetauscher-berechnen.de
marathonerpaolo.com
ilive.lt
4net.guru
skiltogprint.no
calxplus.eu
darrenkeslerministries.com
blog.solutionsarchitect.guru
saxtec.com
vietlawconsultancy.com
the-virtualizer.com
tandartspraktijkheesch.nl
sauschneider.info
comarenterprises.com
maryloutaylor.com
lloydconstruction.com
frontierweldingllc.com
bordercollie-nim.nl
mymoneyforex.com
charlottepoudroux-photographie.fr
101gowrie.com
real-estate-experts.com
tennisclubetten.nl
simplyblessedbykeepingitreal.com
stampagrafica.es
vorotauu.ru
penco.ie
kaminscy.com
strategicstatements.com
kosterra.com
carriagehousesalonvt.com
smithmediastrategies.com
mediaclan.info
sojamindbody.com
evologic-technologies.com
steampluscarpetandfloors.com
mrtour.site
gonzalezfornes.es
lapmangfpt.info.vn
schmalhorst.de
kissit.ca
videomarketing.pro
cursosgratuitosnainternet.com
citymax-cr.com
deepsouthclothingcompany.com
richard-felix.co.uk
vancouver-print.ca
lbcframingelectrical.com
layrshift.eu
bxdf.info
oldschoolfun.net
thewellnessmimi.com
expandet.dk
seevilla-dr-sturm.at
pv-design.de
whittier5k.com
consultaractadenacimiento.com
dpo-as-a-service.com
hiddencitysecrets.com.au
highlinesouthasc.com
dekkinngay.com
makeflowers.ru
norovirus-ratgeber.de
smart-light.co.uk
berliner-versicherungsvergleich.de
rehabilitationcentersinhouston.net
whyinterestingly.ru
eaglemeetstiger.de
transportesycementoshidalgo.es
notmissingout.com
pasivect.co.uk
hotelsolbh.com.br
symphonyenvironmental.com
testzandbakmetmening.online
bigler-hrconsulting.ch
saka.gr
ziegler-praezisionsteile.de
x-ray.ca
saarland-thermen-resort.com
songunceliptv.com
friendsandbrgrs.com
analiticapublica.es
upplandsspar.se
hashkasolutindo.com
ampisolabergeggi.it
zieglerbrothers.de
noesis.tech
juneauopioidworkgroup.org
waywithwords.net
slwgs.org
edrcreditservices.nl
lenreactiv-shop.ru
sotsioloogia.ee
vermoote.de
shiftinspiration.com
irinaverwer.com
augenta.com
autodemontagenijmegen.nl
stopilhan.com
hatech.io
d1franchise.com
executiveairllc.com
campus2day.de
biapi-coaching.fr
notsilentmd.org
sw1m.ru
lubetkinmediacompanies.com
fotoideaymedia.es
kuntokeskusrok.fi
kath-kirche-gera.de
backstreetpub.com
manifestinglab.com
kadesignandbuild.co.uk
cirugiauretra.es
fibrofolliculoma.info
bouquet-de-roses.com
leather-factory.co.jp
lmtprovisions.com
gemeentehetkompas.nl
podsosnami.ru
smale-opticiens.nl
ouryoungminds.wordpress.com
maasreusel.nl
pferdebiester.de
gporf.fr
spinheal.ru
synlab.lt
vetapharma.fr
fax-payday-loans.com
admos-gleitlager.de
artotelamsterdam.com
gadgetedges.com
levihotelspa.fi
nestor-swiss.ch
fizzl.ru
worldhealthbasicinfo.com
smhydro.com.pl
ftlc.es
nuzech.com
iyahayki.nl
plv.media
trystana.com
tux-espacios.com
meusharklinithome.wordpress.com
bigbaguettes.eu
winrace.no
drinkseed.com
icpcnj.org
12starhd.online
dubscollective.com
tips.technology
christ-michael.net
cerebralforce.net
coffreo.biz
elimchan.com
securityfmm.com
crowcanyon.com
paulisdogshop.de
allamatberedare.se
nhadatcanho247.com
catholicmusicfest.com
falcou.fr
bundabergeyeclinic.com.au
myzk.site
broseller.com
hkr-reise.de
stupbratt.no
toreria.es
proudground.org
lykkeliv.net
kostenlose-webcams.com
pivoineetc.fr
globedivers.wordpress.com
liikelataamo.fi
team-montage.dk
unim.su
purposeadvisorsolutions.com
iphoneszervizbudapest.hu
run4study.com
c2e-poitiers.com
westdeptfordbuyrite.com
tenacitytenfold.com
despedidascostablanca.es
pocket-opera.de
abitur-undwieweiter.de
twohourswithlena.wordpress.com
havecamerawilltravel2017.wordpress.com
galserwis.pl
zonamovie21.net
aglend.com.au
lange.host
tanzprojekt.com
y-archive.com
directwindowco.com
smartypractice.com
atozdistribution.co.uk
degroenetunnel.com
kao.at
xn--logopdie-leverkusen-kwb.de
bastutunnan.se
pomodori-pizzeria.de
thefixhut.com
appsformacpc.com
urclan.net
gopackapp.com
webcodingstudio.com
rafaut.com
ctrler.cn
smessier.com
socialonemedia.com
heliomotion.com
pogypneu.sk
rerekatu.com
dramagickcom.wordpress.com
idemblogs.com
interactcenter.org
daniel-akermann-architektur-und-planung.ch
hexcreatives.co
architekturbuero-wagner.net
hoteledenpadova.it
global-kids.info
qlog.de
brigitte-erler.com
kojinsaisei.info
www1.proresult.no
theclubms.com
spylista.com
fotoscondron.com
oneheartwarriors.at
marketingsulweb.com
imaginado.de
liveottelut.com
katiekerr.co.uk
woodleyacademy.org
lapinlviasennus.fi
syndikat-asphaltfieber.de
cursoporcelanatoliquido.online
vitalyscenter.es
cnoia.org
id-et-d.fr
esope-formation.fr
tomaso.gr
faizanullah.com
garage-lecompte-rouen.fr
sterlingessay.com
wmiadmin.com
desert-trails.com
smejump.co.th
caribbeansunpoker.com
jusibe.com
klimt2012.info
deltacleta.cat
fairfriends18.de
simpkinsedwards.co.uk
travelffeine.com
devok.info
thailandholic.com
lebellevue.fr
serce.info.pl
siliconbeach-realestate.com
sanyue119.com
iwr.nl
tonelektro.nl
eglectonk.online
iyengaryogacharlotte.com
yourobgyn.net
xn--singlebrsen-vergleich-nec.com
oemands.dk
aco-media.nl
anthonystreetrimming.com
ianaswanson.com
basisschooldezonnewijzer.nl
strandcampingdoonbeg.com
elpa.se
limassoldriving.com
sportverein-tambach.de
bargningavesta.se
greenpark.ch
yassir.pro
forestlakeuca.org.au
advokathuset.dk
nicoleaeschbachorg.wordpress.com
sandd.nl
insigniapmg.com
allure-cosmetics.at
bingonearme.org
parebrise-tla.fr
buroludo.nl
surespark.org.uk
live-con-arte.de
pcp-nc.com
ligiercenter-sachsen.de
schoellhammer.com
pawsuppetlovers.com
harveybp.com
portoesdofarrobo.com
dw-css.de
bayoga.co.uk
rimborsobancario.net
sevenadvertising.com
bimnapratica.com
prochain-voyage.net
1team.es
amerikansktgodis.se
drugdevice.org
2ekeus.nl
lorenacarnero.com
otsu-bon.com
trulynolen.co.uk
flexicloud.hk
chaotrang.com
compliancesolutionsstrategies.com
ogdenvision.com
destinationclients.fr
withahmed.com
pridoxmaterieel.nl
blood-sports.net
denifl-consulting.at
airconditioning-waalwijk.nl
marcuswhitten.site
datacenters-in-europe.com
pt-arnold.de
zweerscreatives.nl
thenewrejuveme.com
euro-trend.pl
socstrp.org
finde-deine-marke.de
vickiegrayimages.com
arteservicefabbro.com
tstaffing.nl
babcockchurch.org
solinegraphic.com
aakritpatel.com
jolly-events.com
gw2guilds.org
abuelos.com
xlarge.at
praxis-foerderdiagnostik.de
raschlosser.de
devlaur.com
smogathon.com
bsaship.com
blogdecachorros.com
ai-spt.jp
antiaginghealthbenefits.com
huissier-creteil.com
erstatningsadvokaterne.dk
autodujos.lt
punchbaby.com
highimpactoutdoors.net
foryourhealth.live
drfoyle.com
petnest.ir
summitmarketingstrategies.com
bauertree.com
koko-nora.dk
myhostcloud.com
cuspdental.com
8449nohate.org
innote.fi
villa-marrakesch.de
ohidesign.com
thee.network
kunze-immobilien.de
darnallwellbeing.org.uk
vibehouse.rw
bunburyfreightservices.com.au
coding-marking.com
eco-southafrica.com
rushhourappliances.com
boisehosting.net
heurigen-bauer.at
presseclub-magdeburg.de
vesinhnha.com.vn
sairaku.net
greenfieldoptimaldentalcare.com
troegs.com
bargningharnosand.se
xn--fnsterputssollentuna-39b.se
huehnerauge-entfernen.de
atalent.fi
restaurantesszimmer.de
tampaallen.com
julis-lsa.de
parking.netgateway.eu
accountancywijchen.nl
modestmanagement.com
katketytaanet.fi
tecnojobsnet.com
seminoc.com
promesapuertorico.com
rhinosfootballacademy.com
slupetzky.at
kafu.ch
commonground-stories.com
markelbroch.com
centromarysalud.com
sexandfessenjoon.wordpress.com
supportsumba.nl
romeguidedvisit.com
ahouseforlease.com
ditog.fr
digivod.de
grupocarvalhoerodrigues.com.br
mrxermon.de
ladelirante.fr
naswrrg.org
qualitaetstag.de
bouldercafe-wuppertal.de
bafuncs.org
iqbalscientific.com
quickyfunds.com
enovos.de
controldekk.com
zenderthelender.com
dareckleyministries.com
sofavietxinh.com
simpliza.com
partnertaxi.sk
mapawood.com
oceanastudios.com
id-vet.com
rocketccw.com
almosthomedogrescue.dog
amylendscrestview.com
maratonaclubedeportugal.com
jadwalbolanet.info
echtveilig.nl
chavesdoareeiro.com
abogadoengijon.es
colorofhorses.com
woodworkersolution.com
conexa4papers.trade
boldcitydowntown.com
castillobalduz.es
live-your-life.jp
pickanose.com
shadebarandgrillorlando.com
cityorchardhtx.com
hvccfloorcare.com
ecpmedia.vn
austinlchurch.com
wien-mitte.co.at
gamesboard.info
berlin-bamboo-bikes.org
xn--rumung-bua.online
durganews.com
cheminpsy.fr
yousay.site
andersongilmour.co.uk
schutting-info.nl
forskolorna.org
alsace-first.com
myhealth.net.au
eadsmurraypugh.com
pinkexcel.com
corola.es
lichencafe.com
opatrovanie-ako.sk
geisterradler.de
abogadosadomicilio.es
schlafsack-test.net
dnepr-beskid.com.ua
latribuessentielle.com
mbfagency.com
ivfminiua.com
gmto.fr
truenyc.co
talentwunder.com
walkingdeadnj.com
starsarecircular.org
sachnendoc.com
hugoversichert.de
navyfederalautooverseas.com
crosspointefellowship.church
epwritescom.wordpress.com
associacioesportivapolitg.cat
zervicethai.co.th
copystar.co.uk
chefdays.de
dutchcoder.nl
pay4essays.net
plastidip.com.ar
figura.team
carlosja.com
hypozentrum.com
carrybrands.nl
nosuchthingasgovernment.com
xn--vrftet-pua.biz
mdk-mediadesign.de
ostheimer.at
victoriousfestival.co.uk
ymca-cw.org.uk
chandlerpd.com
jasonbaileystudio.com
plantag.de
herbstfeststaefa.ch
pcprofessor.com
celeclub.org
upmrkt.co
senson.fi
dr-seleznev.com
art2gointerieurprojecten.nl
cyntox.com
corona-handles.com
besttechie.com
itelagen.com
n1-headache.com
sabel-bf.com
faronics.com
kindersitze-vergleich.de
psc.de
toponlinecasinosuk.co.uk
eraorastudio.com
dr-pipi.de
uimaan.fi
fitnessingbyjessica.com
bricotienda.com
verytycs.com
torgbodenbollnas.se
asiluxury.com
stormwall.se
sanaia.com
actecfoundation.org
delawarecorporatelaw.com
vdberg-autoimport.nl
verifort-capital.de
longislandelderlaw.com
polzine.net
artige.com
ontrailsandboulevards.com
izzi360.com
d2marketing.co.uk
retroearthstudio.com
cimanchesterescorts.co.uk
fatfreezingmachines.com
theapifactory.com
spectrmash.ru
operaslovakia.sk
spsshomeworkhelp.com
blumenhof-wegleitner.at
DupontSellsHomes.com
slimani.net
muamuadolls.com
humanityplus.org
microcirc.net
nakupunafoundation.org
classycurtainsltd.co.uk
iwelt.de
kevinjodea.com
lillegrandpalais.com
tarotdeseidel.com
ftf.or.at
dushka.ua
hairstylesnow.site
deko4you.at
maxadams.london
all-turtles.com
new.devon.gov.uk
licor43.de
blossombeyond50.com
ncs-graphic-studio.com
fransespiegels.nl
paymybill.guru
rieed.de
ecopro-kanto.com
ruralarcoiris.com
deoudedorpskernnoordwijk.nl
monark.com
apolomarcas.com
alfa-stroy72.com
35-40konkatsu.net
luckypatcher-apkz.com
sweering.fr
pubweb.carnet.hr
bogdanpeptine.ro
osterberg.fi
insidegarage.pl
centuryrs.com
dontpassthepepper.com
pmcimpact.com
vibethink.net
wari.com.pe
scenepublique.net
pmc-services.de
theshungiteexperience.com.au
miraclediet.fun
igorbarbosa.com
girlillamarketing.com
minipara.com
you-bysia.com.au
iviaggisonciliegie.it
seitzdruck.com
familypark40.com
zimmerei-deboer.de
freie-gewerkschaften.de
xltyu.com
div-vertriebsforschung.de
precisionbevel.com
abl1.net
midmohandyman.com
refluxreducer.com
greenko.pl
mmgdouai.fr
makeitcount.at
charlesreger.com
lucidinvestbank.com
narcert.com
ino-professional.ru
the-domain-trader.com
ungsvenskarna.se
slimidealherbal.com
revezlimage.com
danielblum.info
roadwarrior.app
noskierrenteria.com
helikoptervluchtnewyork.nl
anteniti.com
wsoil.com.sg
bradynursery.com
coding-machine.com
seagatesthreecharters.com
oncarrot.com
mezhdu-delom.ru
gastsicht.de
advizewealth.com
zso-mannheim.de
psnacademy.in
bbsmobler.se
digi-talents.com
bigasgrup.com
waveneyrivercentre.co.uk
321play.com.hk
farhaani.com
mrsplans.net
psa-sec.de
goodgirlrecovery.com
love30-chanko.com
lescomtesdemean.be
softsproductkey.com
maureenbreezedancetheater.org
mepavex.nl
ceres.org.au
skanah.com
sipstroysochi.ru
yamalevents.com
fitovitaforum.com
piajeppesen.dk
tomoiyuma.com
zewatchers.com
zimmerei-fl.de
bildungsunderlebnis.haus
newyou.at
promalaga.es
mylolis.com
caribdoctor.org
tigsltd.com
jobcenterkenya.com
onlybacklink.com
body-armour.online
mercantedifiori.com
mooshine.com
educar.org
luxurytv.jp
jenniferandersonwriter.com
gymnasedumanagement.com
planchaavapor.net
jiloc.com
norpol-yachting.com
milltimber.aberdeen.sch.uk
milsing.hr
firstpaymentservices.com
tinkoff-mobayl.ru
humancondition.com
danholzmann.com
shsthepapercut.com
christinarebuffetcourses.com
bodyfulls.com
lightair.com
mediaacademy-iraq.org
centrospgolega.com
gantungankunciakrilikbandung.com
kmbshipping.co.uk
c-a.co.in
beautychance.se
littlebird.salon
glennroberts.co.nz
adoptioperheet.fi
wellplast.se
kariokids.com
antonmack.de
mindpackstudios.com
zflas.com
kedak.de
jsfg.com
asteriag.com
aurum-juweliere.de
corelifenutrition.com
tinyagency.com
hotelzentral.at
bhwlawfirm.com
deprobatehelp.com
physiofischer.de
ventti.com.ar
ateliergamila.com
johnsonfamilyfarmblog.wordpress.com
em-gmbh.ch
celularity.com
insp.bi
schoolofpassivewealth.com
selfoutlet.com
ravensnesthomegoods.com
rosavalamedahr.com
tradiematepro.com.au
abogados-en-alicante.es
devstyle.org
thedresserie.com
evangelische-pfarrgemeinde-tuniberg.de
binder-buerotechnik.at
kirkepartner.dk
bestbet.com
nokesvilledentistry.com
heidelbergartstudio.gallery
web.ion.ag
krlosdavid.com
geoffreymeuli.com
bookspeopleplaces.com
tongdaifpthaiphong.net
drnice.de
platformier.com
aniblinova.wordpress.com
bierensgebakkramen.nl
urist-bogatyr.ru
better.town
wraithco.com
sahalstore.com
assurancesalextrespaille.fr
herbayupro.com
anybookreader.de
boulderwelt-muenchen-west.de
ra-staudte.de
officehymy.com
ikads.org
hrabritelefon.hr
oneplusresource.org
smalltownideamill.wordpress.com
tulsawaterheaterinstallation.com
xtptrack.com
slashdb.com
cactusthebrand.com
grelot-home.com
kisplanning.com.au
phantastyk.com
thaysa.com
comparatif-lave-linge.fr
vitavia.lt
homng.net
nancy-informatique.fr
kamahouse.net
cuppacap.com
paradicepacks.com
todocaracoles.com
lecantou-coworking.com
kampotpepper.gives
dirittosanitario.biz
radaradvies.nl
walter-lemm.de
sarbatkhalsafoundation.org
gasolspecialisten.se
marietteaernoudts.nl
naturavetal.hr
neuschelectrical.co.za
rumahminangberdaya.com
outcomeisincome.com
collaborativeclassroom.org
plotlinecreative.com
cleliaekiko.online
gaiam.nl
braffinjurylawfirm.com
leoben.at
pier40forall.org
stemplusacademy.com
stoneys.ch
rollingrockcolumbia.com
takeflat.com
dr-tremel-rednitzhembach.de
ledmes.ru
edelman.jp
xoabigail.com
alten-mebel63.ru
hokagestore.com
boosthybrid.com.au
rozemondcoaching.nl
miriamgrimm.de
danskretursystem.dk
solhaug.tk
imperfectstore.com
haar-spange.com
htchorst.nl
lapinvihreat.fi
veybachcenter.de
fannmedias.com
cite4me.org
kidbucketlist.com.au
milanonotai.it
bristolaeroclub.co.uk
macabaneaupaysflechois.com
roygolden.com
commercialboatbuilding.com
systemate.dk
milestoneshows.com
faroairporttransfers.net
perbudget.com
theadventureedge.com
dlc.berlin
ora-it.de
nsec.se
nandistribution.nl
sobreholanda.com
connectedace.com
caffeinternet.it
americafirstcommittee.org
bodyforwife.com
asgestion.com
tophumanservicescourses.com
ausbeverage.com.au
turkcaparbariatrics.com
mytechnoway.com
allentownpapershow.com
mooglee.com
servicegsm.net
hebkft.hu
123vrachi.ru
kalkulator-oszczednosci.pl
mariposapropaneaz.com
levdittliv.se
importardechina.info
ilcdover.com
logopaedie-blomberg.de
employeesurveys.com
visiativ-industry.fr
streamerzradio1.site
lionware.de
remcakram.com
porno-gringo.com
baumkuchenexpo.jp
daklesa.de
denovofoodsgroup.com
tandartspraktijkhartjegroningen.nl
ncuccr.org
beaconhealthsystem.org
sinal.org
alhashem.net
groupe-cets.com
jacquin-maquettes.com
embracinghiscall.com
fensterbau-ziegler.de
mirjamholleman.nl
panelsandwichmadrid.es
kikedeoliveira.com
dutchbrewingcoffee.com
helenekowalsky.com
polychromelabs.com
wychowanieprzedszkolne.pl
cwsitservices.co.uk
creative-waves.co.uk
bockamp.com
merzi.info
conasmanagement.de
waynela.com
puertamatic.es
jobmap.at
haremnick.com
morawe-krueger.de
hihaho.com
joyeriaorindia.com
mastertechengineering.com
myteamgenius.com
ki-lowroermond.nl
ccpbroadband.com
madinblack.com
wacochamber.com
kenhnoithatgo.com
harpershologram.wordpress.com
leda-ukraine.com.ua
rebeccarisher.com
mousepad-direkt.de
financescorecard.com
cafemattmeera.com
danubecloud.com
edv-live.de
cortec-neuro.com
apprendrelaudit.com
vannesteconstruct.be
philippedebroca.com
healthyyworkout.com
ralister.co.uk
balticdentists.com
maineemploymentlawyerblog.com
shiresresidential.com
igfap.com
stacyloeb.com
jerling.de
uranus.nl
nurturingwisdom.com
nijaplay.com
edgewoodestates.org
tanzschule-kieber.de
krcove-zily.eu
crediacces.com
igrealestate.com
imadarchid.com
rota-installations.co.uk
oslomf.no
thomas-hospital.de
triggi.de
qualitus.com
rksbusiness.com
koken-voor-baby.nl
behavioralmedicinespecialists.com
hmsdanmark.dk
buymedical.biz
spargel-kochen.de
acomprarseguidores.com
musictreehouse.net
sporthamper.com
vyhino-zhulebino-24.ru
stallbyggen.se
homecomingstudio.com
cranleighscoutgroup.org
olejack.ru
alvinschwartz.wordpress.com
agence-chocolat-noir.com
vihannesporssi.fi
webmaster-peloton.com
thomasvicino.com
tuuliautio.fi
rostoncastings.co.uk
simulatebrain.com
dezatec.es
latestmodsapks.com
ihr-news.jp
peterstrobos.com
jandaonline.com
antenanavi.com
manutouchmassage.com
parks-nuernberg.de
finediningweek.pl
xn--fn-kka.no
creamery201.com
nataschawessels.com
1kbk.com.ua
aarvorg.com
noixdecocom.fr
profectis.de
jakekozmor.com
hannah-fink.de
botanicinnovations.com
chatizel-paysage.fr
alysonhoward.com
satyayoga.de
bouncingbonanza.com
montrium.com
people-biz.com
galleryartfair.com
sportsmassoren.com
higadograsoweb.com
webhostingsrbija.rs
crowd-patch.co.uk
bee4win.com
lukeshepley.wordpress.com
answerstest.ru
malychanieruchomoscipremium.com
work2live.de
gratispresent.se
ilso.net
resortmtn.com
funjose.org.gt
sla-paris.com
huesges-gruppe.de
hairnetty.wordpress.com
ecoledansemulhouse.fr
mountsoul.de
courteney-cox.net
ceid.info.tr
aselbermachen.com
groupe-frayssinet.fr
nachhilfe-unterricht.com
argenblogs.com.ar
karacaoglu.nl
stingraybeach.com
naturstein-hotte.de
memaag.com
launchhubl.com
mank.de
renergysolution.com
kojima-shihou.com
diversiapsicologia.es
lynsayshepherd.co.uk
filmstreamingvfcomplet.be
mountaintoptinyhomes.com
autofolierung-lu.de
lachofikschiet.nl
sloverse.com
lascuola.nl
trackyourconstruction.com
readberserk.com
delchacay.com.ar
foretprivee.ca
themadbotter.com
easytrans.com.au
smokeysstoves.com
odiclinic.org
vloeren-nu.nl
pelorus.group
baylegacy.com
praxis-management-plus.de
jvanvlietdichter.nl
marchand-sloboda.com
sportiomsportfondsen.nl
bridgeloanslenders.com
camsadviser.com
nacktfalter.de
joseconstela.com
allfortheloveofyou.com
verbisonline.com
triactis.com
mylovelybluesky.com
bowengroup.com.au
exenberger.at
atmos-show.com
labobit.it
coursio.com
teknoz.net
international-sound-awards.com
mirkoreisser.de
solerluethi-allart.ch
jyzdesign.com
craigmccabe.fun
newstap.com.ng
brandl-blumen.de
blacksirius.de
extraordinaryoutdoors.com
testcoreprohealthuk.com
zzyjtsgls.com
brevitempore.net
craigvalentineacademy.com
no-plans.com
beyondmarcomdotcom.wordpress.com
moveonnews.com
seproc.hn
baronloan.org
aprepol.com
samnewbyjax.com
projetlyonturin.fr
unetica.fr
mooreslawngarden.com
schraven.de
ulyssemarketing.com
vox-surveys.com
thedad.com
polymedia.dk
first-2-aid-u.com
pierrehale.com
facettenreich27.de
personalenhancementcenter.com
mdacares.com
instatron.net
dsl-ip.de
mrsfieldskc.com
effortlesspromo.com
csgospeltips.se
trapiantofue.it
jameskibbie.com
michaelsmeriglioracing.com
completeweddingkansas.com
entopic.com
lusak.at
leeuwardenstudentcity.nl
freie-baugutachterpraxis.de
modamilyon.com
urmasiimariiuniri.ro
candyhouseusa.com
blgr.be
bptdmaluku.com
pixelarttees.com
hardinggroup.com
henricekupper.com
wasmachtmeinfonds.at
4youbeautysalon.com
space.ua
suncrestcabinets.ca
southeasternacademyofprosthodontics.org
siluet-decor.ru
i-arslan.de
ausair.com.au
mir-na-iznanku.com
dinslips.se
tanciu.com
stoeferlehalle.de
stemenstilte.nl
chrissieperry.com
aodaichandung.com
journeybacktolife.com
deschl.net
architecturalfiberglass.org
modelmaking.nl
carolinepenn.com
argos.wityu.fund
micro-automation.de
boompinoy.com
fitnessbazaar.com
ussmontanacommittee.us
coastalbridgeadvisors.com
xn--thucmctc-13a1357egba.com
croftprecision.co.uk
tetinfo.in
vanswigchemdesign.com
ncid.bc.ca
hushavefritid.dk
nvwoodwerks.com
shhealthlaw.com
agence-referencement-naturel-geneve.net
baustb.de
jeanlouissibomana.com
mediaplayertest.net
stefanpasch.me
campusoutreach.org
klusbeter.nl
wolf-glas-und-kunst.de
spacecitysisters.org
handi-jack-llc.com
adultgamezone.com
quizzingbee.com
ivivo.es
theduke.de
pointos.com
-
net
true
-
pid
$2a$10$w1jWCB5wnkpakB1gWM5pqesysfsCUtfl.HbQ75TEpMzoH2CneWp..
-
prc
oracle
ocomm
wordpa
sqbcoreservice
mydesktopservice
firefox
tbirdconfig
sql
visio
onenote
excel
thunderbird
infopath
mydesktopqos
ocssd
powerpnt
encsvc
dbsnmp
isqlplussvc
dbeng50
ocautoupds
steam
xfssvccon
msaccess
vss
synctime
winword
mspub
agntsvc
thebat
outlook
-
ransom_oneliner
All of your files are encrypted! Find how to decrypt {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.cc/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
3476
-
svc
vss
veeam
svc$
mepocs
backup
sql
memtas
sophos
Extracted
C:\Recovery\How to decrypt 875dl-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/02B52B35A55CFD9B
http://decryptor.cc/02B52B35A55CFD9B
Extracted
C:\Recovery\How to decrypt erpm2op31q-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/77BAAD7ED57110EF
http://decryptor.cc/77BAAD7ED57110EF
Targets
-
-
Target
993f7a8655043289c7ef2c74e5d59a6a_JaffaCakes118
-
Size
166KB
-
MD5
993f7a8655043289c7ef2c74e5d59a6a
-
SHA1
51c7653cb3efafbf946d4a853847082ca9f783df
-
SHA256
3338eb73de83e9ab501debbfb28902504af42b7c43490591679267aa59150d51
-
SHA512
d5630a096067272d2057d244d601bdfb74c62319b2e3e4dbcc3a7a669001abe343be360f74b759bb70e9da37397f562aba6195124d1afe893557903a0555896b
-
SSDEEP
3072:LLFrb30BRtBZZg+i2ayy2RjLTuVyu7CJDgoMT3QnFJ05hNl:PJ0BXScFy2RsQJ8zgFJI
Score10/10-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-