General

  • Target

    Telegram.lnk

  • Size

    1KB

  • Sample

    240716-wmvbwatfmp

  • MD5

    f41af6e5d14c7c68a9a3093d709579a6

  • SHA1

    ee2548e831fb3a16f980c16992acfc4411afa1a5

  • SHA256

    85e3c92814e9abdbf40c9161e51fe7b141eba071e3419da242c7b9608ee6f81d

  • SHA512

    afc297dfbd93f7a33222bca486bc7cf87feb73156ecdb1c9ec85a4c6b6d9aac83583c68727a01178adf792e6a0c30e5d9c58a924cf275f5f9578613754866d0e

Malware Config

Extracted

Path

C:\Users\Admin\Downloads\Telegram Desktop\@Inferno_Cloud FREE#80\@Inferno_Cloud\@Inferno_Cloud (1).135_2024_06_24_11_59_09\files\DESKTOP\New folder\New folder (8)\New folder (5)\music\HIGHLIFE REAGGE\Restore-My-Files.txt

Family

lockbit

Ransom Note
All your important files are encrypted! Any attempts to restore your files with the thrid-party software will be fatal for your files! RESTORE YOU DATA POSIBLE ONLY BUYING private key from us. There is only one way to get your files back: 1) Through a standard browser(FireFox, Chrome, Edge, Opera) | 1. Open link http://lockbit-decryptor.top/?8841DD9B0AC925FFD0603B2A94EFA015 | 2. Follow the instructions on this page 2) Through a Tor Browser - recommended | 1. Download Tor browser - https://www.torproject.org/ and install it. | 2. Open link in TOR browser - http://lockbitks2tvnmwk.onion/?8841DD9B0AC925FFD0603B2A94EFA015 This link only works in Tor Browser! | 3. Follow the instructions on this page ### Attention! ### # lockbit-decryptor.top may be blocked. We recommend using a Tor browser to access the site # Do not rename encrypted files. # Do not try to decrypt using third party software, it may cause permanent data loss. # Decryption of your files with the help of third parties may cause increased price(they add their fee to our). # Tor Browser may be blocked in your country or corporate network. Use https://bridges.torproject.org or use Tor Browser over VPN. # Tor Browser user manual https://tb-manual.torproject.org/about
URLs

http://lockbit-decryptor.top/?8841DD9B0AC925FFD0603B2A94EFA015

http://lockbitks2tvnmwk.onion/?8841DD9B0AC925FFD0603B2A94EFA015

Extracted

Path

C:\Users\Admin\Downloads\Telegram Desktop\@Inferno_Cloud FREE#80\@Inferno_Cloud\@Inferno_Cloud (1).230_2024_07_12_16_13_14\history\Google Chrome_Default.txt

Family

blackbasta

Ransom Note
http://192.168.1.1/ http://4rouesmotrices.com/ http://aerofilms.fr/blog/ http://avis-situation-sirene.insee.fr/ http://bureausoulane.com/ http://carmen.carmencarto.fr/105/ONF_Forets.map http://carmen.naturefrance.fr/ http://cartonumerique.blogspot.com/ http://cartorisque.prim.net/ http://christophelaurent.free.fr/LES%20PUBLICITES%20RANGE.htm http://forum-camping-car.fr/camping-car/143/calcul-besoins-electriques.html http://fr.allmetsat.com/ http://fr.blitzortung.org/ http://fr.youtube.com/watch?v=MfsLRjXuMQE http://france.lachainemeteo.com/meteo-france/previsions-meteo-france-0.php http://france.lachainemeteo.com/meteo-france/previsions-meteo-france-1.php http://france3-regions.francetvinfo.fr/nouvelle-aquitaine/emissions/jt-1920-aquitaine http://fredericbonifas.free.fr/osm/garmin.html http://geofree.fr/gf/coordinateconv.asp#listSys http://georezo.net/ http://georezo.net/forum/viewtopic.php?pid=159770 http://geowww.agrocampus-ouest.fr/portails/?portail=mph&mode=viewer&viewer=http://geowww.agrocampus-ouest.fr/sviewer&wmc=http://geowww.agrocampus-ouest.fr/wmc/mph_france.wmc http://groupugo.div.jussieu.fr/groupugo/Textes_accessibles.htm http://home.wtal.de/noegs/freemaps.htm http://ignmap.ign.fr/ http://inpn.mnhn.fr/accueil/index http://iridewess.com/ http://jardihaie.free.fr/ http://ktmadventure.free.fr/ http://le-camping-car-pour-les-nuls.blogspot.fr/2014/01/une-installation-solaire-optimale-pour.html http://leboncoin.fr/ http://leclerc%20parvis/ http://lemonde.fr/ http://mapas.alternativaslibres.es/ http://mappemonde.mgm.fr/ http://maps.google.com/maps?ll=43.269549,-0.736072&spn=0.1,0.1&t=k&hl=en&q=43.269549,-0.736072 http://meteofrance.com/ http://motardvosgien.free.fr/ http://moto.tt.free.fr/index3.htm http://onvqf.over-blog.com/2014/11/pic-de-garralda-depuis-saint-esteben-pyrenees-atlantiques-64-aa-rando.html http://patrimoine-de-france.com/ http://perso.club-internet.fr/acatte/index-des-volcans-du-site.htm http://perso.wanadoo.fr/hard-rockcity/ http://persos.estat.com/ http://professionnels.ign.fr/bdtopo-hydrographie#tab-3 http://short8.info/8361/wXBON3 http://sigesaqi.brgm.fr/?page=carto&mapid=16&bbox=357004.000866328,6300386.57407322,369450.10964318,6312447.20174622 http://sigesaqi.brgm.fr/?page=consultation#menu_2 http://sport-adventure.com/ http://tempsreel.nouvelobs.com/ http://tplinkmifi.net/ http://visibleearth.nasa.gov/ http://volcano.und.edu/vwdocs/current_volcs/current.html http://volcanolive.com/ http://www.01direct.com/ http://www.ac-dc.net/ http://www.acdc.com/ http://www.acdc.com/us/video/you-shook-me-all-night-long-who-made-who-version http://www.acdcbackinblack.net/index2.php?zone=historique http://www.acdcrocks.com/fr/home/ http://www.actigraph.com/fr/ http://www.adventure-spec.com/ http://www.advrider.com/ http://www.aemet.es/es/portada http://www.agoravox.fr/ http://www.alpesgeoconseil.com/A-G-C.html http://www.anglet-tourisme.com/fr/pratique/webcams.php http://www.apasdeloup.org/blog/actus.php?id=94&PHPSESSID=52a3def2914e38f233518fe669f552bf http://www.ardronespain.com/ http://www.aubepine.fr/ http://www.aujardin.info/fiches/encyclopedie-jardin-feuillage.php http://www.autoscout24.es/ http://www.autoweb-france.com/index.php?rub=1&pr=Land%20Rover http://www.avem.fr/ http://www.avem.fr/index.php?page=scoot_liste&cat=125 http://www.avis.fr/Espace-Client http://www.azimut-monitoring.com/contact http://www.barricada.com.es/ http://www.bartouil.4x4.free.fr/ http://www.bayo.com/ http://www.bbc.co.uk/?ok http://www.bedandbreakfast-directory.co.uk/ http://www.bedandbreakfast-directory.co.uk/results.asp?town=Aberystwyth&county=Ceredigion&country=Wales http://www.bedandbreakfasts-uk.co.uk/westmidlandsframe-stratforduponavon.htm http://www.bedandbreakfasts.co.uk/ http://www.bike-stay.net/uk/accom/cemaes-bay.html http://www.bike-stay.net/uk/stay_wales.html http://www.bing.com/?scope=web&setmkt=fr-FR&setlang=match&uid=B489DF5D&FORM=W5WA http://www.bloggif.com/ http://www.boulanger.com/ http://www.bricodepot.fr/pau-mazeres-lezons/ http://www.bricomarche.com/?gclid=Cj0KEQjwuJu9BRDP_-HN9eXs1_UBEiQAlfW39s5hcNQbMsTDbkqw8T_E63pSerqWdye875mihYTA8QcaAgNp8P8HAQ http://www.bridgecafe.co.uk/ http://www.brittany-ferries.fr/Horaires-Caen-Portsmouth http://www.brucespringsteen.net/songs/ http://www.but.fr/ http://www.cadastre.gouv.fr/scpc/accueil.do http://www.caisse-epargne.fr/asp/modele1.aspx http://www.caisse-epargne.fr/besoin_pam.aspx?mar=101&soumar=1011&reg=13335 http://www.capsudmc.org/ http://www.captainjanse.com/glossaire/#q http://www.carrefour.fr/ http://www.cartocassini.org/galerie/index.php? http://www.cartographie.pro/ http://www.castorama.fr/store/html/homepage/home-page.jsp http://www.catnat.net/ http://www.cdiscount.com/default.asp http://www.cemagref.fr/ http://www.chamina.com/ http://www.cipav-retraite.fr/ http://www.codever.fr/ http://www.connexion.fr/ http://www.conrad.fr/?ns_campaign=SEM&ns_mchannel=esv&ns_source=google-adwords_b2c_Marque&ns_linkname=keywords&ns_fee=0&gclid=CJ3YpYL526wCFcMl3god0wOFgg http://www.conservatoire-du-littoral.fr/ http://www.cottonfarm.co.uk/ http://www.courrierinternational.com/ http://www.covoiturage.fr/ http://www.creocean.fr/francais/fiches_techniques/zones_cotieres.htm http://www.ctqui.com/ http://www.darklyrics.com/ http://www.darty.com/webapp/wcs/stores/servlet/DartyHomepageView?storeId=10001 http://www.decathlon.fr/ http://www.degrouptest.com/test-debit.php http://www.directindustry.fr/fabricant-industriel/drone-civil-86142.html http://www.ebay.fr/ http://www.ecosociosystemes.fr/impact_sols.html http://www.ectaur.fr/accueil/ http://www.elmundo.es/ http://www.elpais.es/ http://www.emoto.com/ http://www.enduro-abc.com/ http://www.enduro-france.fr/ http://www.espace-riviere.org/html/sietp.htm http://www.espaceland.com/ http://www.espaces-naturels.fr/ http://www.eurosport.fr/ http://www.faune-aquitaine.org/ http://www.favicon.cc/ http://www.ffm.tv/ http://www.ffmoto.org/ http://www.ffvb.org/front/index.php http://www.fim-live.com/fr http://www.flightradar24.com/ http://www.fnac.com/ http://www.foretpriveefrancaise.com/ http://www.france2.fr/ http://www.francegabion.com/ http://www.franceinter.fr/player http://www.freenduro.com/ http://www.geometre-expert.fr/ http://www.geoportail.fr/ http://www.gif-anime.org/ http://www.google.fr/ http://www.greatbarn.com/ http://www.guardian.co.uk/ http://www.gutenberg.org/wiki/Main_Page http://www.highwaytoacdc.com/ http://www.hyena-mx.com/fr/article?id=125741&n=kit%20deco-ktm-950-adventure-2004 http://www.igoa-moto.fr/ http://www.impots.gouv.fr/ http://www.infobel.com/world http://www.infoclimat.fr/ http://www.infoconcert.com/ http://www.intertrace.eu/ http://www.inventaire.culture.gouv.fr/ http://www.invs.sante.fr/publications/guides/etude_impact/index.html http://www.ironmaiden.com/ http://www.jbsmoto.fr/ http://www.journal-officiel.gouv.fr/ http://www.just-ferries.com/?gclid=CPrsiYTjjqECFQRd4wodS2T4NQ http://www.kelkoo.fr/ http://www.keraunos.org/ http://www.landmania.com/ http://www.larepubliquedespyrenees.fr/ http://www.lastampa.it/ http://www.leboisdespyrenees.fr/ http://www.leboncoin.fr/ http://www.legifrance.gouv.fr/ http://www.legorafi.fr/ http://www.lequipe.com/ http://www.leroymerlin.fr/ http://www.lesarbres.fr/noms-des-arbres-latin-.html http://www.liberation.com/ http://www.lorraine.developpement-durable.gouv.fr/le-guide-de-l-eau-maj-juillet-2009-a2877.html http://www.ludospace.com/power-service-chargeur-electrique-pour-batteries-pws-gold-30-m-c2x20188029 http://www.mediafire.com/index.php#myfiles http://www.mediafire.com/myfiles.php http://www.meilleurmobile.com/?gclid=CIuuoY2pj7QCFXHLtAodbywAtA http://www.metcheck.com/ http://www.meteo-temps-reel.fr/ http://www.meteo.fr/ http://www.meteorage.com/ http://www.midi-pyrenees.ecologie.gouv.fr/ http://www.migraction.net/index.php?m_id=1510&frmSite=22 http://www.montieux.com/ http://www.moto-net.com/ http://www.moto-net.com/live/un-wheeling-a-moto-68-euros-et-retrait-de-2-points.html?trk=SkpJSEdRd1BIUJF/UEZRiVBLUDhJT0dPRjhRf1BHUYlQS1A4T05MTUY4UZMsTXo http://www.moto-station.com/ http://www.moto85.com/ http://www.motoclubduvar.com/ http://www.motogp.com/fr/ http://www.motomag.com/ http://www.motorevue.com/site/accueil.html http://www.motosolution.com/ http://www.motoverte.com/site/accueil.php http://www.museum-bourges.net/html/especes.html http://www.musica.com/letras.asp?c=2444 http://www.mx2k.com/ http://www.mylinea.com/lpoca/ http://www.mytaratata.com/ http://www.n-py.com/ http://www.nouvelle-aquitaine.developpement-durable.gouv.fr/ http://www.occitanie.developpement-durable.gouv.fr/cadrage-prealable-r8393.html http://www.oiseaux.net/ http://www.oldversion.fr/windows/download/winzip-10-0 http://www.omega2.fr/ http://www.openstreetmap.org/ http://www.orange.fr/ http://www.orbitica.com/ http://www.paca.developpement-durable.gouv.fr/ http://www.pagesjaunes.fr/pagesblanches?portail=PJ http://www.phone-fr.com/ http://www.pic-bois.com/ http://www.piedanlo.fr/ http://www.pixmania.com/fr/fr/home.html?sess=db1455cf171467c3f958393a9fb3e0a2 http://www.planfor.fr/ http://www.planisphere-carto.fr/cartographie-2-dimensions/ http://www.previmeteo.com/metar/LFBP-pau.html http://www.prim.net/cgi_bin/citoyen/macommune/23_face_au_risque.html http://www.pwaworldtour.com/ http://www.radegarage.com/ http://www.radegarage.com/2013-08-01/screen-rr/#more-27 http://www.rncan.gc.ca/sciences-terre/geomatique/imagerie-satellitaire-photos-aeriennes/imagerie-satellitaire-produits/ressources-educatives/9310 http://www.rsf.org/ http://www.rugbyrama.fr/ http://www.sandre.eaufrance.fr/ http://www.sat-view.fr/interface/interface.php?login=capsud http://www.sce.fr/ http://www.slate.fr/ http://www.snowforecast.com/ http://www.sotextho.com/ http://www.speedsailing.com/Background_records.htm http://www.spirit-of-metal.com/index-l-fr.html http://www.stayinwales.co.uk/ http://www.stickair.com/index.asp http://www.strato-hebergement.fr/apps/CustomerService http://www.stromboli.org/portal/volcano-livecams/all-volcano-livecams.html http://www.sudouest.com/ http://www.sudouest.fr/ http://www.supermotard-france.fr/ http://www.survoldefrance.fr/ http://www.the-cult.com/ http://www.totalsportek.tv/watch/bt-sport-2/ http://www.touratech.com/ http://www.trailbikemag.com/ http://www.trespa.com/ http://www.trial-club.com/ http://www.ultimate-burning.com/ http://www.valleedossau-tourisme.com/randonnees/cyclo-vtt/boucles-vtt/ http://www.viamichelin.fr/ http://www.viewsurf.com/ http://www.vigicrues.ecologie.gouv.fr/ http://www.visoflora.com/ http://www.viveka.fr/ http://www.voyage4x4.com/ http://www.wdl.org/fr/ http://www.welshhighlandrailway.net/timetable.htm http://www.whois-raynette.fr/ http://www.windguru.cz/fr/index.php?sc=48567&switchlang=1 http://www.windmag.com/ http://www.within-temptation.com/ http://www.wordreference.com/fren/ http://www.worldsbk.com/ http://www.worldsbk.com/fr http://www.youtube.com/?gl=FR&hl=fr http://www2.culture.gouv.fr/culture/inventai/patrimoine/ https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://myaccount.google.com/u/0/yourdata/youtube?hl%3Dfr&followup=https://myaccount.google.com/u/0/yourdata/youtube?hl%3Dfr&hl=fr&authuser=0 https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://takeout.google.com/takeout/custom/youtube?dnm%3Dfalse%26continue%3Dhttps://myaccount.google.com/yourdata/youtube%26hl%3Dfr%26utm_source%3Dprivacy-advisor-youtube&followup=https://takeout.google.com/takeout/custom/youtube?dnm%3Dfalse%26continue%3Dhttps://myaccount.google.com/yourdata/youtube%26hl%3Dfr%26utm_source%3Dprivacy-advisor-youtube&hl=fr&authuser=0 https://actu.geo.fr/animaux/ses-organes-se-sont-arretes-mordue-par-le-seul-serpent-venimeux-de-grande-bretagne-un-fillette-frole-la-mort-220433?utm_source=outbrain&utm_medium=cpc&utm_term=FR_La+R%C3%A9publique+des+Pyren%C3%A9es+%28Sud+Ouest%29_culture+et+loisirs+-+LaRepubliquedesPyrenees.fr&utm_campaign=pmo_GEO_article_mobile_android_iso_froid_fille_serpent&dicbo=v4-xsE6BpJ-1078254507 https://adstructor.com/share/continue?cid=AF5UkWZ4TwUAWGgCAEZSFwASAAAAAADv&hash=9300242 https://adstructor.com/share/continuea?cid=ALZUkWZ4TwUAi2UCAEZSFwASAAAAAAAI&hash=5600287 https://adstructor.com/share/continueazip?cid=AB1VkWZ4TwUAnVkCAEZSFwASAAAAAACO https://adstructor.com/share/continueazip?cid=AJ9VkWZ4TwUAnVkCAE5MFwASAAAAAADr https://adstructor.com/share/download?AF5UkWZ4TwUAWGgCAEZSFwASAAAAAADv/WW8.You_searched_for_global_mapper_-_Rahim_soft&rar https://adstructor.com/share/file?ALZUkWZ4TwUAi2UCAEZSFwASAAAAAAAI/WW7.Global_Mapper_Pro_23_Free_Download&zip https://adstructor.com/share/zipft?AB1VkWZ4TwUAnVkCAEZSFwASAAAAAACO/WW2.Rahim_soft_Download_Free_Software&zip https://adstructor.com/share/zipft?AJ9VkWZ4TwUAnVkCAE5MFwASAAAAAADr/WW2.Global_Mapper_20_Portable_Free_Download&zip https://aerometrex.com.au/ https://alicevision.org/#meshroom https://all3dp.com/fr/1/logiciel-photogrammetrie-scanner-3d-numerisation-3d/#bentley-contextcapture https://alphatango.aviation-civile.gouv.fr/login.jsp https://altea-solutions.fr/index.php/fr/ https://annuaire-entreprises.data.gouv.fr/etablissement/32322255400103 https://anyconv.com/fr/kml-convertisseur/ https://app.clearance.aero/#/map/flights https://assure.ameli.fr/PortailAS/appmanager/PortailAS/assure?_nfpb=true&_pageLabel=as_accueil_page https://auth.qwant.com/kratos/self-service/login/browser?return_to=https%3A%2F%2Fwww.qwant.com%2F%3Fl%3Dfr%26r%3DFR%26sr%3Dfr https://auth.qwant.com/ui/kratos/login?flow=979c1059-c7d0-4610-876f-d579c17eb75c https://auth.qwant.com/ui/kratos/login?return_to=https%3A%2F%2Fwww.qwant.com%2F%3Fl%3Dfr%26r%3DFR%26sr%3Dfr https://basta.media/ https://blender3d.fr/ https://blogs.mediapart.fr/jean-francois-bayart/blog/100724/placement-en-garde-vue-d-un-chercheur-francois-burgat https://bnpe.eaufrance.fr/ https://bourcagneuxduodesnonfanclub.wordpress.com/2014/06/08/mamie-mouqueyrot-a-enfin-ete-chez-le-coiffeur/ https://bpifrance-creation.fr/ https://bruno-basli.software.informer.com/ https://cadastre.data.gouv.fr/datasets/cadastre-etalab https://calendar.google.com/calendar/u/0 https://calendar.google.com/calendar/u/0/r https://calendar.google.com/calendar/u/0/r/eventedit/M2U1ZDUzMTA1ZWVtcmdwaGpjMzJ0NXRuMjggc291bGFuZTY0QG0 https://calendar.google.com/calendar/u/0/r/week https://calendar.google.com/calendar/u/0/r/week/2024/7/17 https://calendar.google.com/calendar/u/0?authuser=0 https://calendar.google.com/calendar?authuser=0 https://carrant.org/choisir-son-kit-rally-pour-sa-701-690/ https://centipede.fr/ https://cfspart-idp.impots.gouv.fr/ https://cfspart-idp.impots.gouv.fr//oauth2/authorize?authType=sso&response_type=code&client_id=52ed02940b0f1c57512f2d6fd064dddffccdea03&redirect_uri=https://cfspart.impots.gouv.fr/?openidconnectcallback=1&scope=openid+profile+authChoice&nonce=Xzzu39SdF92tFv95e_el-w&state=f1f63672091f1754e018c054dcd2f43a85674b0606d38bb2b3f5c12221194cea&display=&prompt=login https://cfspart-idp.impots.gouv.fr/oauth2/authorize?authType=sso&response_type=code&client_id=52ed02940b0f1c57512f2d6fd064dddffccdea03&redirect_uri=https%3A%2F%2Fcfspart.impots.gouv.fr%2F%3Fopenidconnectcallback%3D1&scope=openid+profile+authChoice&nonce=Xzzu39SdF92tFv95e_el-w&state=f1f63672091f1754e018c054dcd2f43a85674b0606d38bb2b3f5c12221194cea&display=& https://cfspart-idp.impots.gouv.fr/oauth2/authorize?authType=sso&response_type=code&client_id=52ed02940b0f1c57512f2d6fd064dddffccdea03&redirect_uri=https%3A%2F%2Fcfspart.impots.gouv.fr%2F%3Fopenidconnectcallback%3D1&scope=openid+profile+authChoice&nonce=Xzzu39SdF92tFv95e_el-w&state=f1f63672091f1754e018c054dcd2f43a85674b0606d38bb2b3f5c12221194cea&display=&prompt=login https://cfspart.impots.gouv.fr/ https://cfspart.impots.gouv.fr/?openidconnectcallback=1&code=972d55d6f12c9b45b9267d2f299d19fe4702a6e6c219998e76c377f216110897&session_state=VxzN6qCYwEsbros%2BysFsafdKUENascEdt3yUyjWFG2o%3D.dWRSUDhZZTNNRENvUTMycUEzTTFoOTBJVGR6SllhbU0rSzZ1anRxdFZRVkhSdDIvNW92bUpmM0R1YU9yMjZ4UlNSNDlUTmM3RkFnU1p2N3Z4ME5vdmJqMnMrVDhvc3laT3g5dncrUUU4V2NISGFRY1M0cnNpNHkrUjJvZ1VOd3U&state=f1f63672091f1754e018c054dcd2f43a85674b0606d38bb2b3f5c12221194cea https://cfspart.impots.gouv.fr/enp/?urlDest=aHR0cHM6Ly9jZnNwYXJ0LmltcG90cy5nb3V2LmZyLw== https://cfspart.impots.gouv.fr/enp/Affichage_Document_PDF?idEnsua=6AC96865517B17F153FE9456A4ECFE1440CB3083DA28F05E7BF80D2973FED02E https://cfspart.impots.gouv.fr/enp/accuei
URLs

http://192.168.1.1/

http://4rouesmotrices.com/

http://aerofilms.fr/blog/

http://avis-situation-sirene.insee.fr/

http://bureausoulane.com/

http://carmen.carmencarto.fr/105/ONF_Forets.map

http://carmen.naturefrance.fr/

http://cartonumerique.blogspot.com/

http://cartorisque.prim.net/

http://christophelaurent.free.fr/LES%20PUBLICITES%20RANGE.htm

http://forum-camping-car.fr/camping-car/143/calcul-besoins-electriques.html

http://fr.allmetsat.com/

http://fr.blitzortung.org/

http://fr.youtube.com/watch?v=MfsLRjXuMQE

http://france.lachainemeteo.com/meteo-france/previsions-meteo-france-0.php

http://france.lachainemeteo.com/meteo-france/previsions-meteo-france-1.php

http://france3-regions.francetvinfo.fr/nouvelle-aquitaine/emissions/jt-1920-aquitaine

http://fredericbonifas.free.fr/osm/garmin.html

http://geofree.fr/gf/coordinateconv.asp#listSys

http://georezo.net/

Targets

    • Target

      Telegram.lnk

    • Size

      1KB

    • MD5

      f41af6e5d14c7c68a9a3093d709579a6

    • SHA1

      ee2548e831fb3a16f980c16992acfc4411afa1a5

    • SHA256

      85e3c92814e9abdbf40c9161e51fe7b141eba071e3419da242c7b9608ee6f81d

    • SHA512

      afc297dfbd93f7a33222bca486bc7cf87feb73156ecdb1c9ec85a4c6b6d9aac83583c68727a01178adf792e6a0c30e5d9c58a924cf275f5f9578613754866d0e

    • Black Basta

      A ransomware family targeting Windows and Linux ESXi first seen in February 2022.

    • Lockbit

      Ransomware family with multiple variants released since late 2019.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks