All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] Data leak [+]
First of all we have uploaded more then 300 GB archived data from \\UDATA.
Example of data:
- Accounting
- Finance
- Personal Data
- Banking data
- Strategic sourcing
- Management
- Projects, plans
- Immigrants info
- Confidential files
And more other...
Our blog:
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/
Read what happens to those who do not pay.
We are ready:
- To provide you the evidence of stolen data
- To give you universal decrypting tool for all encrypted files.
- To delete all the stolen data.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
6758
svc
mepocs
vss
sql
memtas
sophos
backup
svc$
veeam
Extracted
Path
C:\Users\Admin\ig520x30m-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension ig520x30m.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] Data leak [+]
First of all we have uploaded more then 300 GB archived data from \\UDATA.
Example of data:
- Accounting
- Finance
- Personal Data
- Banking data
- Strategic sourcing
- Management
- Projects, plans
- Immigrants info
- Confidential files
And more other...
Our blog:
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/
Read what happens to those who do not pay.
We are ready:
- To provide you the evidence of stolen data
- To give you universal decrypting tool for all encrypted files.
- To delete all the stolen data.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/30A2E6670570A2EE
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/30A2E6670570A2EE
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
