General
-
Target
84f15cd1e1ff47e8ad87588ce955618f_JaffaCakes118
-
Size
647KB
-
Sample
240810-f3yfga1gjf
-
MD5
84f15cd1e1ff47e8ad87588ce955618f
-
SHA1
314ba101ce78f33813e7ed4262d80ed7055a2d0e
-
SHA256
7e0231f034f5d8f1e742373f80f850ad2c22cfdaf1effde4a69d3bfd6c59cba8
-
SHA512
20beb8c116eeac4ba585a24763eb06fb42d9e1f3c764bb4ebff946101edaeecd0ecb006a8b177eb30267adc879623d92fd0d26aebdab4148d18efb305611c62e
-
SSDEEP
12288:0o9pcHUBfjhwHekC8k0u4FMgkSL/meZLgFl6pSKBPKvgqub1a:0o9SHUBfdwjrBjMJyuELOl6mvg7I
Static task
static1
Behavioral task
behavioral1
Sample
84f15cd1e1ff47e8ad87588ce955618f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
84f15cd1e1ff47e8ad87588ce955618f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
sodinokibi
23
823
cascinarosa33.it
tetameble.pl
eshop.design
blavait.fr
epicjapanart.com
theater-lueneburg.de
handyman-silkeborg.dk
uncensoredhentaigif.com
sbit.ag
mrkluttz.com
netadultere.fr
mindfuelers.com
domilivefurniture.com
trivselsguide.dk
duthler.nl
amyandzac.com
yourcosmicbeing.com
poems-for-the-soul.ch
haard-totaal.nl
keyboardjournal.com
chorusconsulting.net
cmascd.com
jobkiwi.com.ng
ziliak.com
jmmartinezilustrador.com
ntinasfiloxenia.gr
tanatek.com
sweetz.fr
mjk.digital
midwestschool.org
nykfdyrehospital.dk
imajyuku-sozoku.com
adabible.org
metroton.ru
the-cupboard.co.uk
nepressurecleaning.com
kroophold-sjaelland.dk
nexstagefinancial.com
kombi-dress.com
mensemetgesigte.co.za
nbva.co.uk
ninjaki.com
the3-week-diet.net
hospitalitytrainingsolutions.co.uk
smarttourism.academy
lyricalduniya.com
cmeow.com
jameswilliamspainting.com
buzzneakers.com
arthakapitalforvaltning.dk
cl0nazepamblog.com
eafx.pro
welovecustomers.fr
acb-gruppe.ch
opt4cdi.com
lapponiasafaris.com
customroasts.com
xn--80addfr4ahr.dp.ua
bg.szczecin.pl
fidelitytitleoregon.com
laaisterplakky.nl
111firstdelray.com
kiraribeaute-nani.com
web865.com
solidhosting.nl
furland.ru
kafkacare.com
xn--billigafrgpatroner-stb.se
irizar.com
gsconcretecoatings.com
factoriareloj.com
fsbforsale.com
rivermusic.nl
jobscore.com
the-beauty-guides.com
wirmuessenreden.com
teethinadaydentalimplants.com
mustangmarketinggroup.com
gta-jjb.fr
ivancacu.com
vdolg24.online
premiumweb.com.ua:443
pixelhealth.net
hotjapaneselesbian.com
acibademmobil.com.tr
operativadigital.com
primemarineengineering.com
bulyginnikitav.000webhostapp.com
startuplive.org
bookingwheel.com
magrinya.net
legundschiess.de
nevadaruralhousingstudies.org
hinotruckwreckers.com.au
alcye.com
radishallgood.com
strauchs-wanderlust.info
devus.de
beauty-traveller.com
richardiv.com
bendel-partner.de
thehovecounsellingpractice.co.uk
craftingalegacy.com
barbaramcfadyenjewelry.com
the5thquestion.com
stage-infirmier.fr
fla.se
from02pro.com
altocontatto.net
tothebackofthemoon.com
slotenmakerszwijndrecht.nl
kompresory-opravy.com
encounter-p.net
breathebettertolivebetter.com
awag-blog.de
catchup-mag.com
mindsparkescape.com
kookooo.com
digitale-elite.de
maryairbnb.wordpress.com
rarefoods.ro
t3brothers.com
mahikuchen.com
lexced.com
globalskills.pt
forumsittard.nl
keuken-prijs.nl
rokthetalk.com
toranjtuition.org
loparnille.se
ebible.co
walterman.es
shrinkingplanet.com
eatyoveges.com
thiagoperez.com
palmenhaus-erfurt.de
kamin-somnium.de
jalkapuu.net
photographycreativity.co.uk
specialtyhomeservicesllc.com
greenrider.nl
smartercashsystem.com
malevannye.ru
oro.ae
ownidentity.com
skyboundnutrition.co.uk
espaciopolitica.com
metallbau-hartmann.eu
therapybusinessacademy.com
kuriero.pro
ramirezprono.com
aheadloftladders.co.uk
julielusktherapy.com
mslp.org
speakaudible.com
letsstopsmoking.co.uk
distrifresh.com
apiarista.de
georgemuncey.com
malzomattalar.com
randyabrown.com
skoczynski.eu
sarahspics.co.uk
thepixelfairy.com
ledyoucan.com
larchwoodmarketing.com
testitjavertailut.net
descargandoprogramas.com
tchernia-conseil.fr
sealgrinderpt.com
jglconsultancy.com
sharonalbrightdds.com
cymru.futbol
adedesign.com
ya-elka.ru
slideevents.be
metcalfe.ca
aktivfriskcenter.se
lmmont.sk
pinkxgayvideoawards.com
jeanmonti.com
saberconcrete.com
frankgoll.com
singletonfinancial.com
galatee-couture.com
easydental.ae
metriplica.academy
vitormmcosta.com
blueridgeheritage.com
billigeflybilletter.dk
fanuli.com.au
liepertgrafikweb.at
relevantonline.eu
signededenroth.dk
christopherhannan.com
livelai.com
wallflowersandrakes.com
girlish.ae
palema.gr
craftron.com
mamajenedesigns.com
drnelsonpediatrics.com
nginx.com
dennisverschuur.com
ultimatelifesource.com
mayprogulka.ru
arabianmice.com
rechtenplicht.be
9nar.com
ketomealprep.academy
watchsale.biz
fi-institutionalfunds.com
wineandgo.hu
skolaprome.eu
foerderverein-vatterschule.de
enews-qca.com
logosindustries.com
bescomedical.de
qandmmusiccenter.com
iexpert99.com
astrographic.com
baikalflot.ru
hekecrm.com
denverwynkoopdentist.com
inewsstar.com
zwemofficial.nl
vapiano.fr
baita.ac
oportowebdesign.com
johnkoen.com
eyedoctordallas.com
bluelakevision.com
stressreliefadvice.com
animalfood-online.de
mollymccarthydesign.com
circlecitydj.com
ruggestar.ch
bundan.com
gavelmasters.com
thesilkroadny.com
glende-pflanzenparadies.de
andermattswisswatches.ch
silkeight.com
nalliasmali.net
hostastay.com
rentsportsequip.com
aidanpublishing.co.uk
onesynergyinternational.com
1deals.com
liverpoolabudhabi.ae
alnectus.com
fta-media.com
glennverschueren.be
sycamoregreenapts.com
mercadodelrio.com
pilotgreen.com
o90.dk
triplettabordeaux.fr
silverbird.dk
imaginekithomes.co.nz
agriturismocastagneto.it
pourlabretagne.bzh
beandrivingschool.com.au
kickittickets.com
lollachiro.com
daveystownhouse.com
a-zpaperwork.eu
catering.com
krishnabrawijaya.com
g2mediainc.com
piestar.com
ideamode.com
zinnystar.com
dnqa.co.uk
smartworkplaza.com
campusce.com
dcc-eu.com
iron-mine.ru
spartamovers.com
corporacionrr.com
cap29010.it
tatyanakopieva.ru
cops4causes.org
mrcar.nl
angelika-schwarz.com
janasfokus.com
colored-shelves.com
rename.kz
bratek-immobilien.de
airvapourbarrier.com
housesofwa.com
orchardbrickwork.com
napisat-pismo-gubernatoru.ru:443
designimage.ae
signamedia.de
rhino-storage.co.uk
cyberpromote.de
lookandseen.com
transifer.fr
worldproskitour.com
charlesfrancis.photos
scotlandsroute66.co.uk
publicompserver.de
motocrosshideout.com
fire-space.com
fskhjalmar.se
innovationgames-brabant.nl
skyscanner.ro
datatri.be
lgiwines.com
sunsolutions.es
patassociation.com
latteswithleslie.com
saint-malo-developpement.fr
bajova.sk
go.labibini.ch
avtoboss163.ru:443
nutriwell.com.sg
activeterroristwarningcompany.com
linearete.com
atrgroup.it
margaretmcshane.com
look.academy
fotoslubna.com
burg-zelem.de
agenceassemble.fr
karelinjames.com
fann.ru
nauticmarine.dk
pajagus.fr
gratiocafeblog.wordpress.com
pokemonturkiye.com
animation-pro.co.uk
alexwenzel.de
wg-heiligenstadt.de
kryddersnapsen.dk
pansionatblago.ru
nieuwsindeklas.be
techybash.com
ufovidmag.com
geoweb.software
benchbiz.com
moira-cristescu.com
nourella.com
sambaglow.com
ronielyn.com
rino-gmbh.com
slotspinner.com
solutionshosting.co.uk
cardsandloyalty.com
levelseven.be
oraweb.net
lovetzuchia.com
vedsegaard.dk
trevi-vl.ru
sololibrerie.it
production-stills.co.uk
artcase.pl
diverfiestas.com.es
unislaw-narty.pl
subyard.com
schroederschoembs.com
abulanov.com
drbenveniste.com
jakubrybak.com
bertbutter.nl
zealcon.ae
eastgrinsteadwingchun.com
framemyballs.com
almamidwifery.com
ceocenters.com
lisa-poncon.fr
hutchstyle.co.uk
aquacheck.co.za
m2graph.fr
biketruck.de
chainofhopeeurope.eu
bluetenreich-brilon.de
guohedd.com
kelsigordon.com
devplus.be
peninggibadan.co.id
spectamarketingdigital.com.br
pharmeko-group.com
charlottelhanna.com
polynine.com
happylublog.wordpress.com
katherinealy.com
dayenne-styling.nl
buonabitare.com
anleggsregisteret.no
dmlcpa.com
luvinsburger.fr
leopoldineroux.com
3daywebs.com
professionetata.com
zorgboerderijravensbosch.nl
andreaskildegaard.dk
mariannelemenestrel.com
akwaba-safaris.com
kryptos72.com
humanviruses.org
goeppinger-teppichreinigung.de
epsondriversforwindows.com
spirello.nl
cac2040.com
hostaletdelsindians.es
tastevirginia.com
test-teleachat.fr
bagaholics.in
laylavalentine.com
dentourage.com
tzn.nu
traitware.com
andrealuchesi.it
luvbec.com
elex.is
gaearoyals.com
kosten-vochtbestrijding.be
cssp-mediation.org
egpu.fr
schluesseldienste-hannover.de
b3b.ch
clemenfoto.dk
sshomme.com
topautoinsurers.net
bilius.dk
claudiakilian.de
spacebel.be
parentsandkids.com
paprikapod.com
hostingbangladesh.net
theintellect.edu.pk
baptistdistinctives.org
ijsselbeton.nl
5thactors.com
nrgvalue.com
acornishstudio.co.uk
davedavisphotos.com
jaaphoekzema.nl
leatherjees.com
block-optic.com
renderbox.ch
boomerslivinglively.com
lifeinbreaths.com
suonenjoen.fi
hawaiisteelbuilding.com
renehartman.nl
campusescalade.com
sprintcoach.com
penumbuhrambutkeiskei.com
medicalsupportco.com
soncini.ch
scentedlair.com
brownswoodblog.com
reizenmetkinderen.be
jacquesgarcianoto.com
tweedekansenloket.nl
rubyaudiology.com
omegamarbella.com
alattekniksipil.com
alltagsrassismus-entknoten.de
dieetuniversiteit.nl
brisbaneosteopathic.com.au
advance-refle.com
noda.com.ua
utilisacteur.fr
selected-minds.de
fitnessblenderstory.com
stitch-n-bitch.com
bridalcave.com
asiaartgallery.jp
global-migrate.com
entdoctor-durban.com
basindentistry.com
dentallabor-luenen.de
clinic-beethovenstrasse-ag.ch
finnergo.eu
zumrutkuyutemel.com
jimprattmediations.com
oncarrot.com
harleystreetspineclinic.com
kenmccallum.com
akcadagofis.com
ilveshistoria.com
site.markkit.com.br
bellesiniacademy.org
adterium.com
kvetymichalovce.sk
casinodepositors.com
bcabattoirs.org
log-barn.co.uk
golfclublandgoednieuwkerk.nl
geitoniatonaggelon.gr
christianscholz.de
campinglaforetdetesse.com
physio-lang.de
craftstone.co.nz
ikadomus.com
grafikstudio-visuell.de
magnetvisual.com
internalresults.com
soundseeing.net
bubbalucious.com
bodet150ans.com
forextimes.ru
placermonticello.com
alharsunindo.com
qwikcoach.com
martha-frets-ceramics.nl
xtensifi.com
advesa.com
limmortelyouth.com
alwaysdc.com
liveyourheartout.co
nuohous.com
itheroes.dk
mac-computer-support-hamburg.de
dierenambulancealkmaar.nl
agrifarm.dk
rishigangoly.com
molinum.pt
globalcompliancenews.com
gbk-tp1.de
bluemarinefoundation.com
janellrardon.com
arearugcleaningnyc.com
awaisghauri.com
min-virksomhed.dk
littlesaints.academy
envomask.com
mike.matthies.de
skidpiping.de
michal-s.co.il
bakingismyyoga.com
teutoradio.de
projektparkiet.pl
tramadolhealth.com
sellthewrightway.com
edrickennedymacfoy.com
adaduga.info
prodentalblue.com
myfbateam.com
texanscan.org
theboardroomafrica.com
ddmgen.com
salonlamar.nl
schulz-moelln.de
sjtpo.org
rhino-turf.com
elliemaccreative.wordpress.com
agencewho-aixenprovence.fr
focuskontur.com
dogsunlimitedguide.com
betterce.com
k-v-f.de
morgansconsult.com
shortysspices.com
promus.ca
ikzoekgod.be
mind2muscle.nl
redpebblephotography.com
bcmets.info
rapid5kloan.org
hom-frisor.dk
monstarrsoccer.com
donau-guides.eu
marcandy.com
prometeyagro.com.ua
birthplacemag.com
veggienessa.com
o2o-academy.com
nationnewsroom.com
muller.nl
collegetennis.info
zdrowieszczecin.pl
mondolandscapes.com
skinkeeper.li
aceroprime.com
artvark.nl
powershell.su
bayshoreelite.com
supercarhire.co.uk
queertube.net
pvandambv.nl
denhaagfoodie.nl
avisioninthedesert.com
ykobbqchicken.ca
augen-praxisklinik-rostock.de
narca.net
lesyeuxbleus.net
outstandingminialbums.com
sveneulberg.de
wyreforest.net
wribrazil.com
dinedrinkdetroit.com
shortsalemap.com
business-basic.de
dr-vita.de
azerbaycanas.com
lovcase.com
flossmoordental.com
holocine.de
bodymindchallenger.com
triplettagaite.fr
eurethicsport.eu
topvijesti.net
theatre-embellie.fr
advanced-removals.co.uk
onlinemarketingsurgery.co.uk
patriotcleaning.net
stoneridgemontessori.com
condormobile.fr
leijstrom.com
fascaonline.com
ox-home.com
sochi-okna23.ru
bringmehope.org
perceptdecor.com
so-sage.fr
osn.ro
witraz.pl
tradenavigator.ch
ncn.nl
leadforensics.com
concontactodirecto.com
thegrinningmanmusical.com
aberdeenartwalk.org
annenymus.com
successcolony.com.ng
frimec-international.es
muni.pe
c-sprop.com
ludoil.it
universelle.fr
banukumbak.com
qrs-international.com
biblica.com
amelielecompte.wordpress.com
mneti.ru
aciscomputers.com
jefersonalessandro.com
levencovka.ru
matteoruzzaofficial.com
lunoluno.com
miscbo.it
chatterchatterchatter.com
purepreprod4.com
awaitspain.com
curtsdiscountguns.com
banksrl.co.za
kdbrh.com
eksperdanismanlik.com
anchelor.com
jayfurnitureco.com
profiz.com
hnkns.com
smartspeak.com
atelierkomon.com
azloans.com
citydogslife.com
efficiencyconsulting.es
profibersan.com
apogeeconseils.fr
loysonbryan.com
initconf.com
line-x.co.uk
reygroup.pt
biodentify.ai
hawthornsretirement.co.uk
mazzaropi.com.br
valiant-voice.com
parksideseniorliving.net
pankiss.ru
innersurrection.com
cuadc.org
precisetemp.com
opticahubertruiz.com
ygallerysalonsoho.com:443
nvisionsigns.com
hartofurniture.com
motocrossplace.co.uk
koncept-m.ru
jandhpest.com
triavlete.com
billscars.net
johnsonweekly.com
protoplay.ca
wasnederland.nl
druktemakersheerenveen.nl
autoteamlast.de
agora-collectivites.com
karmeliterviertel.com
funworx.de
neolaiamedispa.com
babysitting-hk.helpergo.co
mursall.de
phoenixcrane.com
billyoart.com
jollity.hu
ingresosextras.online
gurutechnologies.net
kausette.com
sber-biznes.com
hypogenforensic.com
thegetawaycollective.com
schlagbohrmaschinetests.com
hameghlim.com
omnicademy.com
bychowo.pl
cp-bap.de
mediogiro.com.ar
quitescorting.com
brannbornfastigheter.se
innervisions-id.com
mariajosediazdemera.com
mgimalta.com
comoserescritor.com
insane.agency
haus-landliebe.de
pubcon.com
allinonecampaign.com
ciga-france.fr
lumturo.academy
oexebusiness.com
brighthillgroup.com
ced-elec.com
pro-gamer.pl
hensleymarketing.com
tilldeeke.de
mazift.dk
vvego.com
die-immo-agentur.de
heuvelland-oaze.nl
chatberlin.de
bruut.online
bohrlochversicherung.info
parseport.com
zaczytana.com
racefietsenblog.nl
wordpress.idium.no
eos-horlogerie.com
fridakids.com
apmollerpension.com
domaine-des-pothiers.com
uci-france.fr
dreamvoiceclub.org
rizplakatjaya.com
gazelle-du-web.com
trainiumacademy.com
saboboxtel.uk
weddingceremonieswithtim.com
alpesiberie.com
catalyseurdetransformation.com
rsidesigns.com
lsngroupe.com
lashandbrowenvy.com
oscommunity.de
stanleyqualitysystems.com
modamarfil.com
switch-made.com
happycatering.de
kerstliedjeszingen.nl
ahgarage.com
interlinkone.com
elitkeramika-shop.com.ua
mediahub.co.nz
carolynfriedlander.com
mundo-pieces-auto.fr
vipcarrental.ae
indiebizadvocates.org
stringnosis.academy
jlgraphisme.fr
kemtron.fr
frameshift.it
ncjc.ca
latableacrepes-meaux.fr
agendatwentytwenty.com
vitoriaecoturismo.com.br
nepal-pictures.com
whoopingcrane.com
yuanshenghotel.com
pisofare.co
santastoy.store
csaballoons.com
hotelturbo.de
putzen-reinigen.com
smartmind.net
michaelfiegel.com
voetbalhoogeveen.nl
leloupblanc.gr
hiddensee-buhne11.de
onlinetvgroup.com
jobstomoveamerica.org
finsahome.co.uk
stathmoulis.gr
webforsites.com
premier-iowa.com
grancanariaregional.com
sppdstats.com
photonag.com
ilovefullcircle.com
atma.nl
ronaldhendriks.nl
paardcentraal.nl
eventosvirtualesexitosos.com
studionumerik.fr
futurenetworking.com
askstaffing.com
goddardleadership.org
natturestaurante.com.br
yourhappyevents.fr
heimdalbygg.no
galaniuklaw.com
terraflair.de
xn--80abehgab4ak0ddz.xn--p1ai
gardenpartner.pl
n-newmedia.de
citiscapes-art.com
speiserei-hannover.de
alisodentalcare.com
drbrianhweeks.com
ravage-webzine.nl
xrresources.com
yvesdoin-aquarelles.fr
cleanroomequipment.ie
computer-place.de
pedmanson.com
cotton-avenue.co.il
volta.plus
towelroot.co
mangimirossana.it
rozmata.com
jax-interim-and-projectmanagement.com
mediabolmong.com
makingmillionaires.net
rentingwell.com
landgoedspica.nl
naukaip.ru
turing.academy
bjornvanvulpen.nl
dinecorp.com
oththukaruva.com
taulunkartano.fi
perfectgrin.com
aoyama.ac
mesajjongeren.nl
tages-geldvergleich.de
fotoeditores.com
livedeveloper.com
centuryvisionglobal.com
voice2biz.com
stralsund-ansichten.de
newonestop.com
simpleitsolutions.ch
gatlinburgcottage.com
molade.nl
airserviceunlimited.com
manzel.tn
arazi.eus
peppergreenfarmcatering.com.au
four-ways.com
amorbellezaysalud.com
brunoimmobilier.com
endlessrealms.net
tieronechic.com
energosbit-rp.ru
etgdogz.de
licensed-public-adjuster.com
mieleshopping.it
brinkdoepke.eu
masecologicos.com
raeoflightmusic.com
cxcompany.com
mrmac.com
markseymourphotography.co.uk
boyfriendsgoal.site
advancedeyecare.com
thenalpa.com
alene.co
kristianboennelykke.dk
11.in.ua
boloria.de
endstarvation.com
acumenconsultingcompany.com
optigas.com
berdonllp.com
broccolisoep.nl
crestgood.com
mikegoodfellow.co.uk
proffteplo.com
floweringsun.org
jdscenter.com
bmw-i-pure-impulse.com
cesep2019.com
myplaywin3.com
bumbipdeco.site
otpusk.zp.ua
pinthelook.com
skooppi.fi
forskolinslimeffect.net
direitapernambuco.com
zuerich-umzug.ch
belinda.af
secrets-clubs.co.uk
scietech.academy
linkbuilding.life
tesisatonarim.com
riffenmattgarage.ch
satoblog.org
yournextshoes.com
yayasanprimaunggul.org
johnstonmingmanning.com
5pointpt.com
diakonie-weitramsdorf-sesslach.de
wrinstitute.org
limounie.com
khtrx.com
evsynthacademy.org
springfieldplumbermo.com
gosouldeep.com
jonnyhooley.com
buerocenter-butzbach-werbemittel.de
invela.dk
parisschool.ru
richardkershawwines.co.za
lassocrm.com
rossomattonecase.it
husetsanitas.dk
antesacademy.it
nxtstg.org
hepishopping.com
enactusnhlstenden.com
neonodi.be
greeneyetattoo.com
goodherbalhealth.com
alaskaremote.com
nicksrock.com
istantidigitali.com
jag.me
2020hindsight.info
tellthebell.website
thisprettyhair.com
tutvracks.com
olry-cloisons.fr
matthieupetel.fr
graygreenbiomedservices.com
mariamalmahdi.com
explora.nl
marmarabasin.com
verbouwingsdouche.nl
dentalcircle.com
altitudeboise.com
phukienbepthanhdat.com
electricianul.com
albcleaner.fr
stagefxinc.com
palmecophilippines.com
chris-anne.com
breakluckrecords.com
cormanmarketing.com
belofloripa.be
paradigmlandscape.com
expohomes.com
achetrabalhos.com
fbmagazine.ru
amco.net.au
cookinn.nl
pxsrl.it
stabilisateur.fr
coachpreneuracademy.com
pays-saint-flour.fr
rs-danmark.dk
fazagostar.co
richardmaybury.co.uk
internestdigital.com
teamsegeln.ch
alabamaroofingllc.com
hm-com.com
edvestors.org
glas-kuck.de
tbalp.co.uk
hoteltantra.com
rolleepollee.com
der-stempelking.de
lattalvor.com
auberives-sur-vareze.fr
90nguyentuan.com
fluzfluzrewards.com
chinowarehousespace.com
suitesartemis.gr
bd2fly.com
deduktia.fi
lidkopingsnytt.nu
k-zubki.ru
sachainchiuk.com
sytzedevries.com
affligemsehondenschool.be
plbinsurance.com
xn--ziinoapte-6ld.ro
factorywizuk.com
cincinnatiphotocompany.org
memphishealthandwellness.com
bavovrienden.nl
hvitfeldt.dk
fysiotherapierijnmond.nl
carmel-york.com
p-ride.live
juergenblaetz.de
dibli.store
angelsmirrorus.com
pazarspor.org.tr
avis.mantova.it
goodboyscustom.com
fixx-repair.com
unexplored.gr
janmorgenstern.com
ayudaespiritualtamara.com
circuit-diagramz.com
scholarquotes.com
creohn.de
angeleyezstripclub.com
chomiksy.net
delegationhub.com
baumfinancialservices.com
bonitabeachassociation.com
bourchier.org
greatofficespaces.net
kellengatton.com
aslog.fr
directique.com
axisoflove.org:443
groovedealers.ru
lagschools.ng
unboxtherapy.site
afbudsrejserallinclusive.dk
rattanwarehouse.co.uk
jlwilsonbooks.com
thestudio.academy
cainlaw-okc.com
buffdaddyblog.com
carsten.sparen-it.de
mbuildinghomes.com
werkzeugtrolley.net
justaroundthecornerpetsit.com
drvoip.com
rtc24.com
tecleados.com
docarefoundation.org
grupoexin10.com
dantreranch.com
iactechnologies.net
letterscan.de
reputation-medical.online
imagine-entertainment.com
ocduiblog.com
louiedager.com
victorvictoria.com
rvside.com
leansupremegarcinia.net
pureelements.nl
maxcube24.com.ua
kartuindonesia.com
cc-experts.de
blucamp.com
martinipstudios.com
deziplan.ru
wademurray.com
annida.it
subquercy.fr
klapanvent.ru
redctei.co
auto-opel.ro
-
net
true
-
pid
23
-
prc
agntsvc
isqlplussvc
ocssd
winword
ocomm
dbeng50
infopath
msaccess
synctime
visio
outlook
firefox
thebat
steam
onenote
thunderbird
excel
mydesktopqos
mspub
wordpa
dbsnmp
ocautoupds
sqbcoreservice
tbirdconfig
sql
powerpnt
xfssvccon
oracle
encsvc
mydesktopservice
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
823
-
svc
sql
svc$
memtas
veeam
vss
mepocs
sophos
backup
Extracted
C:\Users\otvxs4xh2-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/941D287A520BE8E1
http://decryptor.top/941D287A520BE8E1
Extracted
C:\Users\27a7na6-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/39C97D591F0E7421
http://decryptor.top/39C97D591F0E7421
Targets
-
-
Target
84f15cd1e1ff47e8ad87588ce955618f_JaffaCakes118
-
Size
647KB
-
MD5
84f15cd1e1ff47e8ad87588ce955618f
-
SHA1
314ba101ce78f33813e7ed4262d80ed7055a2d0e
-
SHA256
7e0231f034f5d8f1e742373f80f850ad2c22cfdaf1effde4a69d3bfd6c59cba8
-
SHA512
20beb8c116eeac4ba585a24763eb06fb42d9e1f3c764bb4ebff946101edaeecd0ecb006a8b177eb30267adc879623d92fd0d26aebdab4148d18efb305611c62e
-
SSDEEP
12288:0o9pcHUBfjhwHekC8k0u4FMgkSL/meZLgFl6pSKBPKvgqub1a:0o9SHUBfdwjrBjMJyuELOl6mvg7I
-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Direct Volume Access
1Indicator Removal
2File Deletion
2Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1