General
-
Target
a133909376f0499059642768d4f73a95_JaffaCakes118
-
Size
116KB
-
Sample
240817-e3vh5szgnm
-
MD5
a133909376f0499059642768d4f73a95
-
SHA1
fda53c8b4d684b7454d204ed395934159c091133
-
SHA256
4270895e0d3973d98d5014e299f9e9a4dee0e528d37adbbcf47dc52ca483fd74
-
SHA512
f205002c4059a98c1b917be8644c9f1d02ec4ccdf10d35e7bb34d75f47aca72f16400dce024842dd4694d9557bdf20d5dece66dd2be112bade22d0101f8a6ae0
-
SSDEEP
1536:CPp8kFF4+utlznGEvCrUmUYwGOmpX2yaICS4Aa7AJlwUHhDc8j5rXE:8vnuGqfGOqVBJi4c8jZXE
Static task
static1
Behavioral task
behavioral1
Sample
a133909376f0499059642768d4f73a95_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a133909376f0499059642768d4f73a95_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Malware Config
Extracted
sodinokibi
$2a$10$d8LCyznMrERhllJlQe2k7OXdWBXVQ7wOzS9EVCTG0FJIJk5jGsnzS
5487
rushhourappliances.com
mastertechengineering.com
ora-it.de
ausbeverage.com.au
physiofischer.de
mrtour.site
evangelische-pfarrgemeinde-tuniberg.de
craftleathermnl.com
heliomotion.com
ki-lowroermond.nl
samnewbyjax.com
delchacay.com.ar
associationanalytics.com
fensterbau-ziegler.de
thefixhut.com
tongdaifpthaiphong.net
run4study.com
brawnmediany.com
jobcenterkenya.com
seagatesthreecharters.com
starsarecircular.org
thee.network
vitavia.lt
psnacademy.in
nestor-swiss.ch
kojinsaisei.info
theadventureedge.com
copystar.co.uk
sinal.org
www1.proresult.no
aglend.com.au
hokagestore.com
kuntokeskusrok.fi
songunceliptv.com
lusak.at
jvanvlietdichter.nl
oslomf.no
xn--vrftet-pua.biz
sachnendoc.com
mank.de
sla-paris.com
agence-chocolat-noir.com
ftf.or.at
videomarketing.pro
jandaonline.com
slimidealherbal.com
atmos-show.com
groupe-cets.com
schoellhammer.com
grupocarvalhoerodrigues.com.br
amylendscrestview.com
vermoote.de
huehnerauge-entfernen.de
polzine.net
first-2-aid-u.com
spd-ehningen.de
elpa.se
frontierweldingllc.com
malychanieruchomoscipremium.com
commonground-stories.com
xn--rumung-bua.online
summitmarketingstrategies.com
ligiercenter-sachsen.de
gemeentehetkompas.nl
diversiapsicologia.es
houseofplus.com
securityfmm.com
lukeshepley.wordpress.com
burkert-ideenreich.de
maxadams.london
simpliza.com
femxarxa.cat
baronloan.org
garage-lecompte-rouen.fr
no-plans.com
stemplusacademy.com
vannesteconstruct.be
galleryartfair.com
edrcreditservices.nl
yamalevents.com
xn--fn-kka.no
wellplast.se
bimnapratica.com
vickiegrayimages.com
kunze-immobilien.de
celeclub.org
drinkseed.com
oemands.dk
nsec.se
instatron.net
truenyc.co
sportsmassoren.com
nataschawessels.com
eadsmurraypugh.com
danubecloud.com
oceanastudios.com
ladelirante.fr
backstreetpub.com
x-ray.ca
sportverein-tambach.de
triactis.com
i-arslan.de
boulderwelt-muenchen-west.de
waywithwords.net
alsace-first.com
darnallwellbeing.org.uk
smokeysstoves.com
despedidascostablanca.es
hexcreatives.co
stingraybeach.com
ymca-cw.org.uk
renergysolution.com
onlybacklink.com
hkr-reise.de
kampotpepper.gives
mountsoul.de
jakekozmor.com
synlab.lt
pinkexcel.com
lorenacarnero.com
pawsuppetlovers.com
scenepublique.net
carlosja.com
krcove-zily.eu
zimmerei-deboer.de
elimchan.com
supportsumba.nl
mirkoreisser.de
manijaipur.com
thomasvicino.com
d2marketing.co.uk
bee4win.com
embracinghiscall.com
bauertree.com
yassir.pro
zweerscreatives.nl
readberserk.com
pocket-opera.de
herbstfeststaefa.ch
lapinvihreat.fi
psc.de
gadgetedges.com
plastidip.com.ar
bargningavesta.se
panelsandwichmadrid.es
delawarecorporatelaw.com
beautychance.se
havecamerawilltravel2017.wordpress.com
hmsdanmark.dk
charlesreger.com
xn--fnsterputssollentuna-39b.se
systemate.dk
rota-installations.co.uk
live-your-life.jp
smejump.co.th
tonelektro.nl
teresianmedia.org
carrybrands.nl
candyhouseusa.com
drnice.de
entopic.com
ncid.bc.ca
durganews.com
tennisclubetten.nl
trackyourconstruction.com
ceid.info.tr
christinarebuffetcourses.com
dubnew.com
hotelsolbh.com.br
dinslips.se
plantag.de
blewback.com
jasonbaileystudio.com
fransespiegels.nl
deepsouthclothingcompany.com
jbbjw.com
luckypatcher-apkz.com
biortaggivaldelsa.com
withahmed.com
rhinosfootballacademy.com
art2gointerieurprojecten.nl
ulyssemarketing.com
southeasternacademyofprosthodontics.org
purposeadvisorsolutions.com
polychromelabs.com
imadarchid.com
you-bysia.com.au
iwelt.de
parkcf.nl
ecpmedia.vn
live-con-arte.de
ianaswanson.com
cortec-neuro.com
abl1.net
facettenreich27.de
dr-pipi.de
stemenstilte.nl
centuryrs.com
lionware.de
eco-southafrica.com
satyayoga.de
sojamindbody.com
advokathuset.dk
higadograsoweb.com
cranleighscoutgroup.org
leather-factory.co.jp
autopfand24.de
dnepr-beskid.com.ua
ftlc.es
miriamgrimm.de
allamatberedare.se
jameskibbie.com
midmohandyman.com
edelman.jp
schraven.de
almosthomedogrescue.dog
coursio.com
apprendrelaudit.com
citymax-cr.com
pcp-nc.com
projetlyonturin.fr
alten-mebel63.ru
firstpaymentservices.com
bingonearme.org
bigler-hrconsulting.ch
conasmanagement.de
yousay.site
autodujos.lt
proudground.org
eglectonk.online
dr-tremel-rednitzhembach.de
glennroberts.co.nz
ccpbroadband.com
socstrp.org
accountancywijchen.nl
bestbet.com
otto-bollmann.de
nancy-informatique.fr
kenhnoithatgo.com
makeflowers.ru
artallnightdc.com
grelot-home.com
harveybp.com
dezatec.es
dontpassthepepper.com
maureenbreezedancetheater.org
veybachcenter.de
transportesycementoshidalgo.es
pubweb.carnet.hr
mrsfieldskc.com
mooreslawngarden.com
planchaavapor.net
saxtec.com
fundaciongregal.org
pickanose.com
asiluxury.com
erstatningsadvokaterne.dk
resortmtn.com
tips.technology
tanzprojekt.com
calabasasdigest.com
innote.fi
klusbeter.nl
mediaclan.info
broseller.com
pelorus.group
anthonystreetrimming.com
ogdenvision.com
kaliber.co.jp
enovos.de
tarotdeseidel.com
licor43.de
puertamatic.es
colorofhorses.com
strandcampingdoonbeg.com
muamuadolls.com
caffeinternet.it
shsthepapercut.com
brevitempore.net
ctrler.cn
hihaho.com
fayrecreations.com
coastalbridgeadvisors.com
liveottelut.com
id-vet.com
tampaallen.com
tanzschule-kieber.de
kirkepartner.dk
international-sound-awards.com
saarland-thermen-resort.com
wychowanieprzedszkolne.pl
bodyfulls.com
parking.netgateway.eu
notsilentmd.org
vesinhnha.com.vn
ledmes.ru
compliancesolutionsstrategies.com
humanityplus.org
naturstein-hotte.de
refluxreducer.com
leeuwardenstudentcity.nl
xltyu.com
xlarge.at
cuspdental.com
teczowadolina.bytom.pl
lynsayshepherd.co.uk
lichencafe.com
mylovelybluesky.com
christ-michael.net
braffinjurylawfirm.com
ai-spt.jp
julis-lsa.de
personalenhancementcenter.com
neuschelectrical.co.za
sevenadvertising.com
thenewrejuveme.com
interactcenter.org
associacioesportivapolitg.cat
bockamp.com
i-trust.dk
tandartspraktijkheesch.nl
tinyagency.com
creative-waves.co.uk
toreria.es
datacenters-in-europe.com
vancouver-print.ca
suncrestcabinets.ca
offroadbeasts.com
hannah-fink.de
beyondmarcomdotcom.wordpress.com
latribuessentielle.com
kariokids.com
ausair.com.au
calxplus.eu
allure-cosmetics.at
geoffreymeuli.com
corendonhotels.com
shiftinspiration.com
naswrrg.org
naturalrapids.com
hushavefritid.dk
lightair.com
rocketccw.com
kisplanning.com.au
brigitte-erler.com
dw-css.de
roygolden.com
jiloc.com
lillegrandpalais.com
socialonemedia.com
pogypneu.sk
nijaplay.com
desert-trails.com
mezhdu-delom.ru
cactusthebrand.com
lapinlviasennus.fi
thomas-hospital.de
sanyue119.com
tsklogistik.eu
simoneblum.de
nachhilfe-unterricht.com
nicoleaeschbachorg.wordpress.com
boosthybrid.com.au
makeurvoiceheard.com
haremnick.com
partnertaxi.sk
kaotikkustomz.com
controldekk.com
falcou.fr
waveneyrivercentre.co.uk
ouryoungminds.wordpress.com
crowcanyon.com
simulatebrain.com
rksbusiness.com
bridgeloanslenders.com
koko-nora.dk
roadwarrior.app
joyeriaorindia.com
dushka.ua
cuppacap.com
healthyyworkout.com
caribbeansunpoker.com
globedivers.wordpress.com
kidbucketlist.com.au
geisterradler.de
bptdmaluku.com
ecoledansemulhouse.fr
htchorst.nl
real-estate-experts.com
milanonotai.it
launchhubl.com
iyengaryogacharlotte.com
kadesignandbuild.co.uk
norpol-yachting.com
theapifactory.com
dublikator.com
asgestion.com
wari.com.pe
kevinjodea.com
nurturingwisdom.com
layrshift.eu
wien-mitte.co.at
creamery201.com
radaradvies.nl
mrxermon.de
todocaracoles.com
bunburyfreightservices.com.au
maineemploymentlawyerblog.com
mountaintoptinyhomes.com
theletter.company
aniblinova.wordpress.com
upplandsspar.se
testcoreprohealthuk.com
oncarrot.com
bristolaeroclub.co.uk
digivod.de
trapiantofue.it
sahalstore.com
behavioralmedicinespecialists.com
quemargrasa.net
rostoncastings.co.uk
bargningharnosand.se
extraordinaryoutdoors.com
body-guards.it
kissit.ca
porno-gringo.com
schmalhorst.de
completeweddingkansas.com
wasmachtmeinfonds.at
smessier.com
berliner-versicherungsvergleich.de
kingfamily.construction
cwsitservices.co.uk
faroairporttransfers.net
cityorchardhtx.com
croftprecision.co.uk
prochain-voyage.net
miraclediet.fun
joseconstela.com
lmtprovisions.com
verifort-capital.de
appsformacpc.com
sotsioloogia.ee
sipstroysochi.ru
wmiadmin.com
shiresresidential.com
analiticapublica.es
extensionmaison.info
homesdollar.com
wsoil.com.sg
caribdoctor.org
fitovitaforum.com
hardinggroup.com
craigmccabe.fun
foretprivee.ca
xtptrack.com
hebkft.hu
smogathon.com
conexa4papers.trade
ditog.fr
pier40forall.org
besttechie.com
osterberg.fi
vitalyscenter.es
anybookreader.de
montrium.com
paymybill.guru
nvwoodwerks.com
bouldercafe-wuppertal.de
gonzalezfornes.es
thaysa.com
financescorecard.com
berlin-bamboo-bikes.org
quickyfunds.com
friendsandbrgrs.com
mbxvii.com
filmvideoweb.com
argenblogs.com.ar
maryloutaylor.com
rebeccarisher.com
dubscollective.com
fotoideaymedia.es
helenekowalsky.com
xn--logopdie-leverkusen-kwb.de
stoeberstuuv.de
tecnojobsnet.com
aunexis.ch
stacyloeb.com
mapawood.com
ahouseforlease.com
hhcourier.com
iqbalscientific.com
better.town
tomoiyuma.com
gporf.fr
architekturbuero-wagner.net
365questions.org
trulynolen.co.uk
moveonnews.com
sloverse.com
krlosdavid.com
faronics.com
notmissingout.com
kamienny-dywan24.pl
greenfieldoptimaldentalcare.com
1team.es
poultrypartners.nl
parks-nuernberg.de
stefanpasch.me
surespark.org.uk
kostenlose-webcams.com
stopilhan.com
handi-jack-llc.com
levdittliv.se
promalaga.es
stampagrafica.es
helikoptervluchtnewyork.nl
romeguidedvisit.com
sexandfessenjoon.wordpress.com
esope-formation.fr
hypozentrum.com
adoptioperheet.fi
bowengroup.com.au
shonacox.com
jorgobe.at
aodaichandung.com
binder-buerotechnik.at
manutouchmassage.com
devstyle.org
kosterra.com
321play.com.hk
igorbarbosa.com
vetapharma.fr
fotoscondron.com
stoeferlehalle.de
freie-baugutachterpraxis.de
travelffeine.com
mrsplans.net
pcprofessor.com
hellohope.com
web.ion.ag
forestlakeuca.org.au
selfoutlet.com
insidegarage.pl
eraorastudio.com
gmto.fr
jerling.de
vibethink.net
seevilla-dr-sturm.at
chandlerpd.com
hotelzentral.at
aprepol.com
austinlchurch.com
artotelamsterdam.com
verytycs.com
bordercollie-nim.nl
xn--thucmctc-13a1357egba.com
igfap.com
koken-voor-baby.nl
unim.su
geekwork.pl
smalltownideamill.wordpress.com
marchand-sloboda.com
darrenkeslerministries.com
philippedebroca.com
effortlesspromo.com
ungsvenskarna.se
bouquet-de-roses.com
markelbroch.com
myzk.site
seitzdruck.com
huissier-creteil.com
directwindowco.com
presseclub-magdeburg.de
expandet.dk
heurigen-bauer.at
xn--singlebrsen-vergleich-nec.com
spinheal.ru
imperfectstore.com
figura.team
thailandholic.com
tomaso.gr
ivivo.es
micahkoleoso.de
zimmerei-fl.de
fiscalsort.com
baustb.de
danielblum.info
micro-automation.de
blog.solutionsarchitect.guru
nakupunafoundation.org
cimanchesterescorts.co.uk
pointos.com
nhadatcanho247.com
henricekupper.com
catholicmusicfest.com
noixdecocom.fr
olejack.ru
oldschoolfun.net
winrace.no
portoesdofarrobo.com
castillobalduz.es
greenko.pl
sporthamper.com
turkcaparbariatrics.com
symphonyenvironmental.com
precisionbevel.com
courteney-cox.net
augenta.com
tandartspraktijkhartjegroningen.nl
softsproductkey.com
sportiomsportfondsen.nl
solhaug.tk
campus2day.de
ino-professional.ru
cyntox.com
schutting-info.nl
modelmaking.nl
naturavetal.hr
waynela.com
c-a.co.in
35-40konkatsu.net
troegs.com
slwgs.org
actecfoundation.org
ravensnesthomegoods.com
myhostcloud.com
wraithco.com
deko4you.at
quizzingbee.com
crediacces.com
kindersitze-vergleich.de
irishmachineryauctions.com
epwritescom.wordpress.com
vanswigchemdesign.com
rimborsobancario.net
myteamgenius.com
werkkring.nl
baylegacy.com
drugdevice.org
kath-kirche-gera.de
4youbeautysalon.com
revezlimage.com
dareckleyministries.com
itelagen.com
paulisdogshop.de
katketytaanet.fi
twohourswithlena.wordpress.com
id-et-d.fr
operaslovakia.sk
knowledgemuseumbd.com
collaborativeclassroom.org
lbcframingelectrical.com
worldhealthbasicinfo.com
modestmanagement.com
alfa-stroy72.com
denovofoodsgroup.com
ncuccr.org
mdacares.com
triggi.de
sabel-bf.com
nmiec.com
sandd.nl
familypark40.com
richard-felix.co.uk
platformier.com
justinvieira.com
tulsawaterheaterinstallation.com
memaag.com
crosspointefellowship.church
cite4me.org
digi-talents.com
mooglee.com
pmcimpact.com
devlaur.com
nuzech.com
ncs-graphic-studio.com
abitur-undwieweiter.de
spsshomeworkhelp.com
liliesandbeauties.org
loprus.pl
hvccfloorcare.com
profectis.de
blood-sports.net
leda-ukraine.com.ua
connectedace.com
tuuliautio.fi
commercialboatbuilding.com
farhaani.com
microcirc.net
marathonerpaolo.com
architecturalfiberglass.org
hatech.io
ampisolabergeggi.it
kao.at
carolinepenn.com
bastutunnan.se
webhostingsrbija.rs
urmasiimariiuniri.ro
imaginado.de
yourobgyn.net
mediaacademy-iraq.org
cursosgratuitosnainternet.com
aco-media.nl
balticdentists.com
aminaboutique247.com
thewellnessmimi.com
plotlinecreative.com
rosavalamedahr.com
rumahminangberdaya.com
stupbratt.no
jolly-events.com
love30-chanko.com
faizanullah.com
remcakram.com
theshungiteexperience.com.au
4net.guru
mylolis.com
goodgirlrecovery.com
bricotienda.com
siluet-decor.ru
themadbotter.com
carriagehousesalonvt.com
lenreactiv-shop.ru
alhashem.net
outcomeisincome.com
buroludo.nl
shhealthlaw.com
sauschneider.info
pierrehale.com
vox-surveys.com
blacksirius.de
izzi360.com
linnankellari.fi
dpo-as-a-service.com
classycurtainsltd.co.uk
pv-design.de
seproc.hn
airconditioning-waalwijk.nl
deschl.net
perbudget.com
alysonhoward.com
morawe-krueger.de
marcuswhitten.site
syndikat-asphaltfieber.de
blgr.be
pivoineetc.fr
phantastyk.com
advizewealth.com
celularity.com
wurmpower.at
pasvenska.se
8449nohate.org
allentownpapershow.com
logopaedie-blomberg.de
kalkulator-oszczednosci.pl
solinegraphic.com
pomodori-pizzeria.de
psa-sec.de
charlottepoudroux-photographie.fr
ilcdover.com
theclubms.com
DupontSellsHomes.com
fitnessbazaar.com
mepavex.nl
easytrans.com.au
aarvorg.com
slimani.net
verbisonline.com
zieglerbrothers.de
smart-light.co.uk
ikads.org
ventti.com.ar
homng.net
teknoz.net
corola.es
rafaut.com
cursoporcelanatoliquido.online
maasreusel.nl
ziegler-praezisionsteile.de
aselbermachen.com
lebellevue.fr
jacquin-maquettes.com
mariposapropaneaz.com
nokesvilledentistry.com
uimaan.fi
ateliergamila.com
marketingsulweb.com
plv.media
bildungsunderlebnis.haus
rollingrockcolumbia.com
gantungankunciakrilikbandung.com
flexicloud.hk
mousepad-direkt.de
zzyjtsgls.com
people-biz.com
steampluscarpetandfloors.com
coffreo.biz
exenberger.at
pmc-services.de
mymoneyforex.com
destinationclients.fr
kikedeoliveira.com
mbfagency.com
spacecitysisters.org
arteservicefabbro.com
testzandbakmetmening.online
gasbarre.com
solerluethi-allart.ch
andersongilmour.co.uk
aakritpatel.com
stoneys.ch
admos-gleitlager.de
zewatchers.com
ohidesign.com
vyhino-zhulebino-24.ru
lescomtesdemean.be
hashkasolutindo.com
vloeren-nu.nl
vietlawconsultancy.com
westdeptfordbuyrite.com
waermetauscher-berechnen.de
greenpark.ch
argos.wityu.fund
antiaginghealthbenefits.com
boompinoy.com
luxurytv.jp
webmaster-peloton.com
pixelarttees.com
bouncingbonanza.com
alvinschwartz.wordpress.com
deprobatehelp.com
101gowrie.com
dramagickcom.wordpress.com
edv-live.de
antenanavi.com
denifl-consulting.at
siliconbeach-realestate.com
body-armour.online
nosuchthingasgovernment.com
assurancesalextrespaille.fr
bxdf.info
gastsicht.de
abogados-en-alicante.es
levihotelspa.fi
leoben.at
nativeformulas.com
tradiematepro.com.au
homecomingstudio.com
penco.ie
opatrovanie-ako.sk
narcert.com
americafirstcommittee.org
bigasgrup.com
mardenherefordshire-pc.gov.uk
sterlingessay.com
forskolorna.org
stallbyggen.se
happyeasterimages.org
fibrofolliculoma.info
lange.host
autofolierung-lu.de
jenniferandersonwriter.com
whittier5k.com
finediningweek.pl
anteniti.com
iwr.nl
12starhd.online
apolomarcas.com
buymedical.biz
agence-referencement-naturel-geneve.net
mir-na-iznanku.com
schlafsack-test.net
maratonaclubedeportugal.com
the-virtualizer.com
hiddencitysecrets.com.au
villa-marrakesch.de
toponlinecasinosuk.co.uk
musictreehouse.net
antonmack.de
groupe-frayssinet.fr
servicegsm.net
importardechina.info
bundabergeyeclinic.com.au
vdberg-autoimport.nl
devok.info
newyou.at
smhydro.com.pl
skanah.com
simplyblessedbykeepingitreal.com
kmbshipping.co.uk
abogadosaccidentetraficosevilla.es
milltimber.aberdeen.sch.uk
centrospgolega.com
cheminpsy.fr
thedad.com
coding-marking.com
zenderthelender.com
pt-arnold.de
cafemattmeera.com
freie-gewerkschaften.de
basisschooldezonnewijzer.nl
urist-bogatyr.ru
ralister.co.uk
n1-headache.com
employeesurveys.com
euro-trend.pl
oneplusresource.org
foryourhealth.live
tophumanservicescourses.com
woodworkersolution.com
dlc.berlin
nacktfalter.de
dirittosanitario.biz
lykkeliv.net
jusibe.com
gaiam.nl
chatizel-paysage.fr
tanciu.com
fairfriends18.de
bafuncs.org
takeflat.com
lascuola.nl
jyzdesign.com
abogadoengijon.es
sanaia.com
zervicethai.co.th
rozemondcoaching.nl
wacochamber.com
serce.info.pl
chavesdoareeiro.com
whyinterestingly.ru
blogdecachorros.com
2ekeus.nl
seminoc.com
michaelsmeriglioracing.com
cerebralforce.net
zonamovie21.net
bbsmobler.se
slashdb.com
minipara.com
daklesa.de
piajeppesen.dk
gymnasedumanagement.com
restaurantesszimmer.de
spectrmash.ru
corelifenutrition.com
deoudedorpskernnoordwijk.nl
otsu-bon.com
hairnetty.wordpress.com
crowd-patch.co.uk
campusoutreach.org
ilive.lt
igrealestate.com
boisehosting.net
noskierrenteria.com
ceres.org.au
deltacleta.cat
degroenetunnel.com
iyahayki.nl
kamahouse.net
shadebarandgrillorlando.com
tastewilliamsburg.com
makeitcount.at
bhwlawfirm.com
rieed.de
sairaku.net
lefumetdesdombes.com
urclan.net
limassoldriving.com
lubetkinmediacompanies.com
thedresserie.com
artige.com
fatfreezingmachines.com
biapi-coaching.fr
dr-seleznev.com
sw1m.ru
juneauopioidworkgroup.org
global-kids.info
senson.fi
norovirus-ratgeber.de
reddysbakery.com
webcodingstudio.com
unetica.fr
balticdermatology.lt
jobmap.at
merzi.info
journeybacktolife.com
milestoneshows.com
officehymy.com
abogadosadomicilio.es
atalent.fi
kaminscy.com
csgospeltips.se
simpkinsedwards.co.uk
uranus.nl
adultgamezone.com
gamesboard.info
chefdays.de
tetinfo.in
comparatif-lave-linge.fr
walter-lemm.de
visiativ-industry.fr
educar.org
acomprarseguidores.com
woodleyacademy.org
podsosnami.ru
labobit.it
kojima-shihou.com
navyfederalautooverseas.com
tenacitytenfold.com
123vrachi.ru
atozdistribution.co.uk
trystana.com
parebrise-tla.fr
walkingdeadnj.com
tigsltd.com
ivfminiua.com
highimpactoutdoors.net
jadwalbolanet.info
manifestinglab.com
lachofikschiet.nl
c2e-poitiers.com
work2live.de
lecantou-coworking.com
torgbodenbollnas.se
milsing.hr
fitnessingbyjessica.com
evologic-technologies.com
vihannesporssi.fi
bogdanpeptine.ro
marietteaernoudts.nl
fax-payday-loans.com
mmgdouai.fr
hugoversichert.de
rerekatu.com
bodyforwife.com
ilso.net
baumkuchenexpo.jp
baptisttabernacle.com
bayoga.co.uk
gopackapp.com
birnam-wood.com
new.devon.gov.uk
gw2guilds.org
theduke.de
haar-spange.com
gratispresent.se
hoteledenpadova.it
sweering.fr
judithjansen.com
chaotrang.com
em-gmbh.ch
tinkoff-mobayl.ru
daniel-akermann-architektur-und-planung.ch
bloggyboulga.net
brandl-blumen.de
bsaship.com
corona-handles.com
qualitaetstag.de
div-vertriebsforschung.de
meusharklinithome.wordpress.com
heidelbergartstudio.gallery
johnsonfamilyfarmblog.wordpress.com
longislandelderlaw.com
macabaneaupaysflechois.com
blossombeyond50.com
talentwunder.com
victoriousfestival.co.uk
galserwis.pl
fannmedias.com
strategicstatements.com
smartypractice.com
skiltogprint.no
idemblogs.com
tstaffing.nl
mirjamholleman.nl
spargel-kochen.de
smale-opticiens.nl
babcockchurch.org
iviaggisonciliegie.it
praxis-foerderdiagnostik.de
spylista.com
coding-machine.com
highlinesouthasc.com
comarenterprises.com
insp.bi
dsl-ip.de
filmstreamingvfcomplet.be
1kbk.com.ua
bradynursery.com
pridoxmaterieel.nl
consultaractadenacimiento.com
drfoyle.com
newstap.com.ng
aurum-juweliere.de
team-montage.dk
evergreen-fishing.com
d1franchise.com
y-archive.com
sobreholanda.com
kedak.de
peterstrobos.com
smithmediastrategies.com
mikeramirezcpa.com
sagadc.com
latestmodsapks.com
nandistribution.nl
autodemontagenijmegen.nl
transliminaltribe.wordpress.com
liikelataamo.fi
camsadviser.com
sofavietxinh.com
zso-mannheim.de
hairstylesnow.site
polymedia.dk
pferdebiester.de
the-domain-trader.com
qlog.de
littlebird.salon
icpcnj.org
katiekerr.co.uk
parkstreetauto.net
hrabritelefon.hr
zflas.com
abuelos.com
kafu.ch
answerstest.ru
cirugiauretra.es
ruralarcoiris.com
eaglemeetstiger.de
punchbaby.com
pasivect.co.uk
mercantedifiori.com
ecopro-kanto.com
funjose.org.gt
jeanlouissibomana.com
mdk-mediadesign.de
executiveairllc.com
dutchbrewingcoffee.com
all-turtles.com
pay4essays.net
jsfg.com
allfortheloveofyou.com
bookspeopleplaces.com
girlillamarketing.com
gasolspecialisten.se
petnest.ir
myhealth.net.au
lapmangfpt.info.vn
monark.com
herbayupro.com
promesapuertorico.com
huesges-gruppe.de
schoolofpassivewealth.com
mediaplayertest.net
slupetzky.at
onlyresultsmarketing.com
raschlosser.de
humancondition.com
harpershologram.wordpress.com
cleliaekiko.online
upmrkt.co
ostheimer.at
bierensgebakkramen.nl
vorotauu.ru
amerikansktgodis.se
xoabigail.com
karacaoglu.nl
vibehouse.rw
centromarysalud.com
streamerzradio1.site
oneheartwarriors.at
qualitus.com
cnoia.org
danholzmann.com
echtveilig.nl
boldcitydowntown.com
paradicepacks.com
craigvalentineacademy.com
praxis-management-plus.de
mooshine.com
ihr-news.jp
noesis.tech
blumenhof-wegleitner.at
insigniapmg.com
space.ua
modamilyon.com
fizzl.ru
lucidinvestbank.com
ussmontanacommittee.us
dekkinngay.com
clos-galant.com
madinblack.com
patrickfoundation.net
mindpackstudios.com
mytechnoway.com
retroearthstudio.com
botanicinnovations.com
tux-espacios.com
saka.gr
ontrailsandboulevards.com
bigbaguettes.eu
stormwall.se
ra-staudte.de
rehabilitationcentersinhouston.net
wolf-glas-und-kunst.de
beaconhealthsystem.org
danskretursystem.dk
klimt2012.info
odiclinic.org
intecwi.com
edgewoodestates.org
lloydconstruction.com
asteriag.com
finde-deine-marke.de
irinaverwer.com
dutchcoder.nl
sarbatkhalsafoundation.org
chrissieperry.com
iphoneszervizbudapest.hu
-
net
true
-
pid
$2a$10$d8LCyznMrERhllJlQe2k7OXdWBXVQ7wOzS9EVCTG0FJIJk5jGsnzS
-
prc
oracle
mydesktopqos
ocssd
winword
agntsvc
encsvc
tbirdconfig
sqbcoreservice
firefox
sql
excel
ocautoupds
mydesktopservice
dbeng50
visio
outlook
thunderbird
mspub
xfssvccon
dbsnmp
msaccess
synctime
powerpnt
thebat
steam
onenote
isqlplussvc
ocomm
wordpad
infopath
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. HB-Technik. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.cc/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
5487
-
svc
memtas
svc$
sql
vss
veeam
mepocs
sophos
backup
Extracted
C:\Users\05x18na8-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/3489F54E265ADB5D
http://decryptor.cc/3489F54E265ADB5D
Extracted
C:\Users\8x17t-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/62B723750444625C
http://decryptor.cc/62B723750444625C
Targets
-
-
Target
a133909376f0499059642768d4f73a95_JaffaCakes118
-
Size
116KB
-
MD5
a133909376f0499059642768d4f73a95
-
SHA1
fda53c8b4d684b7454d204ed395934159c091133
-
SHA256
4270895e0d3973d98d5014e299f9e9a4dee0e528d37adbbcf47dc52ca483fd74
-
SHA512
f205002c4059a98c1b917be8644c9f1d02ec4ccdf10d35e7bb34d75f47aca72f16400dce024842dd4694d9557bdf20d5dece66dd2be112bade22d0101f8a6ae0
-
SSDEEP
1536:CPp8kFF4+utlznGEvCrUmUYwGOmpX2yaICS4Aa7AJlwUHhDc8j5rXE:8vnuGqfGOqVBJi4c8jZXE
Score10/10-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-