All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] Data leak [+]
First of all we have uploaded more then 300 GB archived data from \\UDATA.
Example of data:
- Accounting
- Finance
- Personal Data
- Banking data
- Strategic sourcing
- Management
- Projects, plans
- Immigrants info
- Confidential files
And more other...
Our blog:
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/
Read what happens to those who do not pay.
We are ready:
- To provide you the evidence of stolen data
- To give you universal decrypting tool for all encrypted files.
- To delete all the stolen data.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
6758
svc
mepocs
vss
sql
memtas
sophos
backup
svc$
veeam
Extracted
Path
C:\Users\Admin\exyo73y-readme.txt
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension exyo73y.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] Data leak [+]
First of all we have uploaded more then 300 GB archived data from \\UDATA.
Example of data:
- Accounting
- Finance
- Personal Data
- Banking data
- Strategic sourcing
- Management
- Projects, plans
- Immigrants info
- Confidential files
And more other...
Our blog:
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/
Read what happens to those who do not pay.
We are ready:
- To provide you the evidence of stolen data
- To give you universal decrypting tool for all encrypted files.
- To delete all the stolen data.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/BCB6F865E7FB4C7B
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/BCB6F865E7FB4C7B
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
