General
-
Target
c391755e39e2059d1b47385d7f6d55e9_JaffaCakes118
-
Size
164KB
-
Sample
240826-wyq4laybjg
-
MD5
c391755e39e2059d1b47385d7f6d55e9
-
SHA1
33cab61b3c36703d7a1918cdd0130b03b39ae1c1
-
SHA256
da3cd4f45cf5816ab7de2320ad1cf822df7f02afa2b667ba829700998e514f33
-
SHA512
60002a28402c66a6555932e301ac363187d404ce5e702b7d7aef33f1b72253ada5b5dc997e767b85ea0247e9aa4c78420e07dc94ac969dbcb6896da01aad3dad
-
SSDEEP
3072:WGYFrOdhfkQv9jrAprhFmyvEjQDKaUznxQa8OUSep6s:QadFkMGhFjED39WSf
Behavioral task
behavioral1
Sample
c391755e39e2059d1b47385d7f6d55e9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c391755e39e2059d1b47385d7f6d55e9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
sodinokibi
38
379
catering.com
11.in.ua
radishallgood.com
distrifresh.com
gbk-tp1.de
teutoradio.de
easydental.ae
blavait.fr
the3-week-diet.net
towelroot.co
larchwoodmarketing.com
centuryvisionglobal.com
rtc24.com
kafkacare.com
lashandbrowenvy.com
osn.ro
mjk.digital
ikzoekgod.be
computer-place.de
9nar.com
pureelements.nl
oraweb.net
cops4causes.org
bychowo.pl
loysonbryan.com
latteswithleslie.com
avis.mantova.it
dinecorp.com
yourcosmicbeing.com
sppdstats.com
hm-com.com
bakingismyyoga.com
direitapernambuco.com
tieronechic.com
girlish.ae
renehartman.nl
stralsund-ansichten.de
bodymindchallenger.com
adaduga.info
campusescalade.com
banukumbak.com
min-virksomhed.dk
apogeeconseils.fr
rsidesigns.com
theater-lueneburg.de
unboxtherapy.site
bendel-partner.de
gavelmasters.com
smartspeak.com
baumfinancialservices.com
sambaglow.com
livelai.com
zinnystar.com
strauchs-wanderlust.info
parksideseniorliving.net
letterscan.de
omnicademy.com
adterium.com
rubyaudiology.com
geitoniatonaggelon.gr
fridakids.com
ilovefullcircle.com
cainlaw-okc.com
ntinasfiloxenia.gr
k-zubki.ru
ownidentity.com
efficiencyconsulting.es
advesa.com
buffdaddyblog.com
internalresults.com
matteoruzzaofficial.com
moira-cristescu.com
billscars.net
chorusconsulting.net
luvbec.com
victorvictoria.com
bratek-immobilien.de
alaskaremote.com
111firstdelray.com
stressreliefadvice.com
drnelsonpediatrics.com
motocrosshideout.com
mslp.org
toranjtuition.org
ziliak.com
customroasts.com
the-cupboard.co.uk
noda.com.ua
blueridgeheritage.com
triplettabordeaux.fr
happycatering.de
pajagus.fr
unislaw-narty.pl
liveyourheartout.co
lsngroupe.com
harleystreetspineclinic.com
billigeflybilletter.dk
kombi-dress.com
kamin-somnium.de
cap29010.it
antesacademy.it
zaczytana.com
leatherjees.com
alpesiberie.com
rolleepollee.com
lovcase.com
affligemsehondenschool.be
weddingceremonieswithtim.com
switch-made.com
mayprogulka.ru
campusce.com
startuplive.org
vvego.com
legundschiess.de
soncini.ch
fi-institutionalfunds.com
babysitting-hk.helpergo.co
transifer.fr
magnetvisual.com
narca.net
subyard.com
smartworkplaza.com
bumbipdeco.site
concontactodirecto.com
fotoeditores.com
tbalp.co.uk
thegetawaycollective.com
rishigangoly.com
schlagbohrmaschinetests.com
skooppi.fi
kausette.com
designimage.ae
mindsparkescape.com
tastevirginia.com
muni.pe
agriturismocastagneto.it
floweringsun.org
licensed-public-adjuster.com
mariannelemenestrel.com
aslog.fr
amyandzac.com
pedmanson.com
saberconcrete.com
lollachiro.com
andrealuchesi.it
alcye.com
signamedia.de
rename.kz
chomiksy.net
diakonie-weitramsdorf-sesslach.de
ykobbqchicken.ca
qrs-international.com
palema.gr
ninjaki.com
irizar.com
baita.ac
speakaudible.com
molinum.pt
janasfokus.com
khtrx.com
grafikstudio-visuell.de
beauty-traveller.com
sprintcoach.com
campinglaforetdetesse.com
ahgarage.com
dibli.store
projektparkiet.pl
richardiv.com
imaginekithomes.co.nz
chainofhopeeurope.eu
eafx.pro
entdoctor-durban.com
hotelturbo.de
encounter-p.net
asiaartgallery.jp
aktivfriskcenter.se
makingmillionaires.net
bagaholics.in
bjornvanvulpen.nl
autoteamlast.de
pubcon.com
four-ways.com
geoweb.software
broccolisoep.nl
bruut.online
interlinkone.com
mediahub.co.nz
natturestaurante.com.br
xn--billigafrgpatroner-stb.se
trevi-vl.ru
cp-bap.de
acornishstudio.co.uk
akwaba-safaris.com
dentourage.com
richardmaybury.co.uk
cl0nazepamblog.com
satoblog.org
bajova.sk
thepixelfairy.com
ivancacu.com
carolynfriedlander.com
hekecrm.com
keyboardjournal.com
hawthornsretirement.co.uk
hostingbangladesh.net
ikadomus.com
jglconsultancy.com
jameswilliamspainting.com
so-sage.fr
ketomealprep.academy
alexwenzel.de
leloupblanc.gr
descargandoprogramas.com
mac-computer-support-hamburg.de
fskhjalmar.se
mustangmarketinggroup.com
devplus.be
schluesseldienste-hannover.de
ramirezprono.com
scholarquotes.com
energosbit-rp.ru
voetbalhoogeveen.nl
pankiss.ru
lgiwines.com
casinodepositors.com
studionumerik.fr
allinonecampaign.com
mamajenedesigns.com
raeoflightmusic.com
domilivefurniture.com
eurethicsport.eu
prodentalblue.com
yvesdoin-aquarelles.fr
cmascd.com
qwikcoach.com
speiserei-hannover.de
metriplica.academy
activeterroristwarningcompany.com
galaniuklaw.com
haard-totaal.nl
kryptos72.com
prometeyagro.com.ua
professionetata.com
2020hindsight.info
bonitabeachassociation.com
ludoil.it
valiant-voice.com
michal-s.co.il
santastoy.store
atelierkomon.com
frameshift.it
go.labibini.ch
rokthetalk.com
zealcon.ae
dogsunlimitedguide.com
slideevents.be
cincinnatiphotocompany.org
skidpiping.de
nalliasmali.net
martinipstudios.com
humanviruses.org
kompresory-opravy.com
sveneulberg.de
alnectus.com
elliemaccreative.wordpress.com
groovedealers.ru
hom-frisor.dk
placermonticello.com
singletonfinancial.com
nationnewsroom.com
parentsandkids.com
lyricalduniya.com
tothebackofthemoon.com
relevantonline.eu
stathmoulis.gr
precisetemp.com
hartofurniture.com
jefersonalessandro.com
alltagsrassismus-entknoten.de
ced-elec.com
rentsportsequip.com
kdbrh.com
bodet150ans.com
bluetenreich-brilon.de
maxcube24.com.ua
cleanroomequipment.ie
buzzneakers.com
initconf.com
krishnabrawijaya.com
mbuildinghomes.com
pokemonturkiye.com
solidhosting.nl
wg-heiligenstadt.de
iexpert99.com
kenmccallum.com
sachainchiuk.com
reputation-medical.online
fire-space.com
aberdeenartwalk.org
alwaysdc.com
angelsmirrorus.com
phoenixcrane.com
jobstomoveamerica.org
m2graph.fr
rino-gmbh.com
yuanshenghotel.com
karelinjames.com
golfclublandgoednieuwkerk.nl
mrkluttz.com
carsten.sparen-it.de
queertube.net
astrographic.com
ocduiblog.com
charlesfrancis.photos
focuskontur.com
gatlinburgcottage.com
glende-pflanzenparadies.de
epsondriversforwindows.com
alharsunindo.com
lesyeuxbleus.net
pilotgreen.com
kickittickets.com
baikalflot.ru
cc-experts.de
tchernia-conseil.fr
bundan.com
bavovrienden.nl
annida.it
zumrutkuyutemel.com
dreamvoiceclub.org
ayudaespiritualtamara.com
andermattswisswatches.ch
bookingwheel.com
cookinn.nl
artvark.nl
tramadolhealth.com
lassocrm.com
muller.nl
chinowarehousespace.com
brannbornfastigheter.se
vdolg24.online
fanuli.com.au
agencewho-aixenprovence.fr
o90.dk
leopoldineroux.com
piestar.com
cyberpromote.de
landgoedspica.nl
medicalsupportco.com
richardkershawwines.co.za
web865.com
billyoart.com
watchsale.biz
frankgoll.com
mikegoodfellow.co.uk
oththukaruva.com
aheadloftladders.co.uk
leijstrom.com
bulyginnikitav.000webhostapp.com
a-zpaperwork.eu
alisodentalcare.com
solutionshosting.co.uk
gta-jjb.fr
kroophold-sjaelland.dk
manzel.tn
sshomme.com
ilveshistoria.com
suonenjoen.fi
rhino-turf.com
renderbox.ch
awag-blog.de
b3b.ch
redpebblephotography.com
latableacrepes-meaux.fr
innovationgames-brabant.nl
donau-guides.eu
louiedager.com
tzn.nu
gaearoyals.com
forumsittard.nl
furland.ru
parisschool.ru
therapybusinessacademy.com
schulz-moelln.de
site.markkit.com.br
chatterchatterchatter.com
ygallerysalonsoho.com:443
gazelle-du-web.com
logosindustries.com
greatofficespaces.net
boomerslivinglively.com
taulunkartano.fi
turing.academy
gosouldeep.com
wyreforest.net
cesep2019.com
arearugcleaningnyc.com
metcalfe.ca
utilisacteur.fr
fla.se
janmorgenstern.com
techybash.com
clinic-beethovenstrasse-ag.ch
espaciopolitica.com
the5thquestion.com
corporacionrr.com
apiarista.de
suitesartemis.gr
ddmgen.com
fluzfluzrewards.com
zorgboerderijravensbosch.nl
purepreprod4.com
daveystownhouse.com
elex.is
johnsonweekly.com
marmarabasin.com
gardenpartner.pl
sunsolutions.es
myplaywin3.com
baptistdistinctives.org
goddardleadership.org
johnkoen.com
jacquesgarcianoto.com
kartuindonesia.com
hepishopping.com
martha-frets-ceramics.nl
topvijesti.net
perceptdecor.com
thehovecounsellingpractice.co.uk
o2o-academy.com
phukienbepthanhdat.com
fascaonline.com
hypogenforensic.com
atrgroup.it
p-ride.live
tilldeeke.de
fidelitytitleoregon.com
topautoinsurers.net
aceroprime.com
altocontatto.net
gratiocafeblog.wordpress.com
cxcompany.com
airserviceunlimited.com
racefietsenblog.nl
hostastay.com
lifeinbreaths.com
charlottelhanna.com
nevadaruralhousingstudies.org
rechtenplicht.be
blucamp.com
business-basic.de
jimprattmediations.com
drbrianhweeks.com
insane.agency
block-optic.com
bluemarinefoundation.com
laaisterplakky.nl
artcase.pl
linearete.com
protoplay.ca
photographycreativity.co.uk
masecologicos.com
eventosvirtualesexitosos.com
biketruck.de
soundseeing.net
agendatwentytwenty.com
bg.szczecin.pl
carmel-york.com
afbudsrejserallinclusive.dk
akcadagofis.com
omegamarbella.com
g2mediainc.com
futurenetworking.com
pourlabretagne.bzh
bcabattoirs.org
anleggsregisteret.no
putzen-reinigen.com
auberives-sur-vareze.fr
imajyuku-sozoku.com
haus-landliebe.de
annenymus.com
fysiotherapierijnmond.nl
mazift.dk
abulanov.com
marcandy.com
kuriero.pro
amorbellezaysalud.com
paprikapod.com
fixx-repair.com
globalcompliancenews.com
myfbateam.com
xn--80addfr4ahr.dp.ua
docarefoundation.org
stage-infirmier.fr
mundo-pieces-auto.fr
fitnessblenderstory.com
mensemetgesigte.co.za
paardcentraal.nl
palmenhaus-erfurt.de
janellrardon.com
randyabrown.com
jmmartinezilustrador.com
nrgvalue.com
nicksrock.com
oncarrot.com
rossomattonecase.it
maryairbnb.wordpress.com
xn--ziinoapte-6ld.ro
adabible.org
aquacheck.co.za
memphishealthandwellness.com
quitescorting.com
ruggestar.ch
brisbaneosteopathic.com.au
benchbiz.com
glas-kuck.de
greenrider.nl
jonnyhooley.com
mrmac.com
rattanwarehouse.co.uk
digitale-elite.de
oro.ae
eyedoctordallas.com
dmlcpa.com
5thactors.com
chris-anne.com
buonabitare.com
kiraribeaute-nani.com
reygroup.pt
cmeow.com
scietech.academy
kookooo.com
aciscomputers.com
comoserescritor.com
tatyanakopieva.ru
opt4cdi.com
katherinealy.com
mindfuelers.com
ideamode.com
supercarhire.co.uk
matthieupetel.fr
christianscholz.de
teethinadaydentalimplants.com
koncept-m.ru
saboboxtel.uk
circuit-diagramz.com
testitjavertailut.net
bilius.dk
lidkopingsnytt.nu
lagschools.ng
itheroes.dk
premiumweb.com.ua:443
liepertgrafikweb.at
deduktia.fi
luvinsburger.fr
tanatek.com
elitkeramika-shop.com.ua
oscommunity.de
edrickennedymacfoy.com
catalyseurdetransformation.com
magrinya.net
trivselsguide.dk
brunoimmobilier.com
netadultere.fr
iactechnologies.net
advance-refle.com
ravage-webzine.nl
bridalcave.com
thenalpa.com
istantidigitali.com
leansupremegarcinia.net
xtensifi.com
amco.net.au
smartmind.net
craftingalegacy.com
optigas.com
christopherhannan.com
wallflowersandrakes.com
physio-lang.de
coachpreneuracademy.com
pharmeko-group.com
dantreranch.com
thiagoperez.com
advancedeyecare.com
perfectgrin.com
eshop.design
dieetuniversiteit.nl
sarahspics.co.uk
operativadigital.com
bourchier.org
citydogslife.com
hvitfeldt.dk
onlinetvgroup.com
limounie.com
bertbutter.nl
belofloripa.be
iron-mine.ru
subquercy.fr
cotton-avenue.co.il
epicjapanart.com
nvisionsigns.com
hospitalitytrainingsolutions.co.uk
vapiano.fr
peppergreenfarmcatering.com.au
animalfood-online.de
auto-opel.ro
levelseven.be
fann.ru
vipcarrental.ae
signededenroth.dk
endstarvation.com
jandhpest.com
promus.ca
malevannye.ru
bd2fly.com
universelle.fr
mursall.de
fbmagazine.ru
peninggibadan.co.id
zwemofficial.nl
directique.com
jax-interim-and-projectmanagement.com
yourhappyevents.fr
bmw-i-pure-impulse.com
inewsstar.com
linkbuilding.life
stagefxinc.com
angelika-schwarz.com
tages-geldvergleich.de
publicompserver.de
morgansconsult.com
shortsalemap.com
awaitspain.com
berdonllp.com
biodentify.ai
look.academy
airvapourbarrier.com
die-immo-agentur.de
lmmont.sk
otpusk.zp.ua
ledyoucan.com
bubbalucious.com
animation-pro.co.uk
biblica.com
handyman-silkeborg.dk
galatee-couture.com
nourella.com
diverfiestas.com.es
hensleymarketing.com
dennisverschuur.com
mike.matthies.de
salonlamar.nl
aoyama.ac
bayshoreelite.com
apmollerpension.com
hawaiisteelbuilding.com
werkzeugtrolley.net
naukaip.ru
spacebel.be
nutriwell.com.sg
wordpress.idium.no
lunoluno.com
unexplored.gr
ox-home.com
thegrinningmanmusical.com
breakluckrecords.com
neonodi.be
orchardbrickwork.com
hutchstyle.co.uk
cuadc.org
premier-iowa.com
basindentistry.com
mariajosediazdemera.com
theboardroomafrica.com
lapponiasafaris.com
kellengatton.com
druktemakersheerenveen.nl
kemtron.fr
powershell.su
rizplakatjaya.com
smarttourism.academy
mondolandscapes.com
simpleitsolutions.ch
agenceassemble.fr
terraflair.de
explora.nl
laylavalentine.com
photonag.com
craftron.com
rarefoods.ro
rentingwell.com
egpu.fr
primemarineengineering.com
voice2biz.com
husetsanitas.dk
internestdigital.com
profibersan.com
csaballoons.com
boyfriendsgoal.site
fsbforsale.com
slotenmakerszwijndrecht.nl
vitormmcosta.com
cormanmarketing.com
plbinsurance.com
curtsdiscountguns.com
denverwynkoopdentist.com
atma.nl
keuken-prijs.nl
tecleados.com
buerocenter-butzbach-werbemittel.de
theatre-embellie.fr
the-beauty-guides.com
volta.plus
crestgood.com
mediogiro.com.ar
holocine.de
awaisghauri.com
tetameble.pl
mazzaropi.com.br
craftstone.co.nz
hotjapaneselesbian.com
bescomedical.de
lexced.com
saint-malo-developpement.fr
rhino-storage.co.uk
datatri.be
drbenveniste.com
grancanariaregional.com
adedesign.com
amelielecompte.wordpress.com
verbouwingsdouche.nl
leadforensics.com
innersurrection.com
nexstagefinancial.com
hnkns.com
boloria.de
achetrabalhos.com
lookandseen.com
miscbo.it
ebible.co
rozmata.com
sellthewrightway.com
paradigmlandscape.com
skyboundnutrition.co.uk
jeanmonti.com
successcolony.com.ng
liverpoolabudhabi.ae
qandmmusiccenter.com
guohedd.com
anchelor.com
riffenmattgarage.ch
tellthebell.website
xrresources.com
ufovidmag.com
skyscanner.ro
happylublog.wordpress.com
poems-for-the-soul.ch
betterce.com
dierenambulancealkmaar.nl
fazagostar.co
banksrl.co.za
uci-france.fr
acumenconsultingcompany.com
jobkiwi.com.ng
silkeight.com
fta-media.com
denhaagfoodie.nl
ultimatelifesource.com
albcleaner.fr
mesajjongeren.nl
arabianmice.com
azerbaycanas.com
azloans.com
cssp-mediation.org
texanscan.org
kerstliedjeszingen.nl
arthakapitalforvaltning.dk
aidanpublishing.co.uk
modamarfil.com
pro-gamer.pl
mrcar.nl
opticahubertruiz.com
alabamaroofingllc.com
eksperdanismanlik.com
livedeveloper.com
pays-saint-flour.fr
proffteplo.com
alene.co
sbit.ag
burg-zelem.de
chatberlin.de
triavlete.com
karmeliterviertel.com
citiscapes-art.com
jlwilsonbooks.com
jlgraphisme.fr
malzomattalar.com
finnergo.eu
jollity.hu
olry-cloisons.fr
mariamalmahdi.com
cascinarosa33.it
theintellect.edu.pk
kosten-vochtbestrijding.be
avisioninthedesert.com
kristianboennelykke.dk
secrets-clubs.co.uk
electricianul.com
wirmuessenreden.com
skolaprome.eu
birthplacemag.com
arazi.eus
nepressurecleaning.com
andreaskildegaard.dk
thesilkroadny.com
tradenavigator.ch
markseymourphotography.co.uk
envomask.com
mahikuchen.com
edvestors.org
augen-praxisklinik-rostock.de
davedavisphotos.com
spectamarketingdigital.com.br
1deals.com
stringnosis.academy
springfieldplumbermo.com
sytzedevries.com
heuvelland-oaze.nl
ronielyn.com
cardsandloyalty.com
alattekniksipil.com
eos-horlogerie.com
der-stempelking.de
agora-collectivites.com
3daywebs.com
oportowebdesign.com
acibademmobil.com.tr
rivermusic.nl
smartercashsystem.com
bluelakevision.com
midwestschool.org
invela.dk
dinedrinkdetroit.com
acb-gruppe.ch
lumturo.academy
ciga-france.fr
veggienessa.com
margaretmcshane.com
slotspinner.com
michaelfiegel.com
sycamoregreenapts.com
nuohous.com
wribrazil.com
ncjc.ca
expohomes.com
housesofwa.com
forextimes.ru
altitudeboise.com
pvandambv.nl
global-migrate.com
skinkeeper.li
pisofare.co
worldproskitour.com
colored-shelves.com
kvetymichalovce.sk
gsconcretecoatings.com
hiddensee-buhne11.de
lisa-poncon.fr
from02pro.com
mieleshopping.it
sjtpo.org
schroederschoembs.com
clemenfoto.dk
thisprettyhair.com
yournextshoes.com
grupoexin10.com
penumbuhrambutkeiskei.com
specialtyhomeservicesllc.com
finsahome.co.uk
hostaletdelsindians.es
globalskills.pt
napisat-pismo-gubernatoru.ru:443
nxtstg.org
molade.nl
mollymccarthydesign.com
letsstopsmoking.co.uk
littlesaints.academy
pinkxgayvideoawards.com
limmortelyouth.com
mediabolmong.com
avtoboss163.ru:443
production-stills.co.uk
imagine-entertainment.com
hameghlim.com
witraz.pl
eastgrinsteadwingchun.com
pinthelook.com
brinkdoepke.eu
k-v-f.de
monstarrsoccer.com
beandrivingschool.com.au
vedsegaard.dk
belinda.af
johnstonmingmanning.com
whoopingcrane.com
reizenmetkinderen.be
circlecitydj.com
angeleyezstripclub.com
juergenblaetz.de
fotoslubna.com
silverbird.dk
c-sprop.com
shrinkingplanet.com
traitware.com
nykfdyrehospital.dk
nginx.com
mercadodelrio.com
agrifarm.dk
evsynthacademy.org
collegetennis.info
pxsrl.it
profiz.com
hoteltantra.com
etgdogz.de
tweedekansenloket.nl
brownswoodblog.com
teamsegeln.ch
thestudio.academy
goodherbalhealth.com
vitoriaecoturismo.com.br
devus.de
5pointpt.com
metroton.ru
stoneridgemontessori.com
ingresosextras.online
goodboyscustom.com
factoriareloj.com
klapanvent.ru
endlessrealms.net
sololibrerie.it
walterman.es
graygreenbiomedservices.com
mind2muscle.nl
nauticmarine.dk
eatyoveges.com
outstandingminialbums.com
wademurray.com
uncensoredhentaigif.com
triplettagaite.fr
dayenne-styling.nl
onlinemarketingsurgery.co.uk
jaaphoekzema.nl
bellesiniacademy.org
jakubrybak.com
cymru.futbol
flossmoordental.com
skoczynski.eu
brighthillgroup.com
parseport.com
jdscenter.com
catchup-mag.com
almamidwifery.com
ijsselbeton.nl
foerderverein-vatterschule.de
advanced-removals.co.uk
patriotcleaning.net
onesynergyinternational.com
funworx.de
barbaramcfadyenjewelry.com
sealgrinderpt.com
shortysspices.com
stabilisateur.fr
lovetzuchia.com
jayfurnitureco.com
zdrowieszczecin.pl
framemyballs.com
axisoflove.org:443
yayasanprimaunggul.org
rapid5kloan.org
oexebusiness.com
cac2040.com
jag.me
wasnederland.nl
lattalvor.com
spartamovers.com
scotlandsroute66.co.uk
condormobile.fr
heimdalbygg.no
drvoip.com
stanleyqualitysystems.com
stitch-n-bitch.com
sweetz.fr
pixelhealth.net
log-barn.co.uk
jalkapuu.net
newonestop.com
line-x.co.uk
n-newmedia.de
duthler.nl
frimec-international.es
selected-minds.de
sber-biznes.com
goeppinger-teppichreinigung.de
claudiakilian.de
nepal-pictures.com
greeneyetattoo.com
sharonalbrightdds.com
loparnille.se
wrinstitute.org
bcmets.info
scentedlair.com
julielusktherapy.com
rs-danmark.dk
zuerich-umzug.ch
mangimirossana.it
ceocenters.com
justaroundthecornerpetsit.com
trainiumacademy.com
tesisatonarim.com
breathebettertolivebetter.com
glennverschueren.be
dentalcircle.com
innervisions-id.com
dcc-eu.com
mgimalta.com
motocrossplace.co.uk
nieuwsindeklas.be
pansionatblago.ru
palmecophilippines.com
jobscore.com
rvside.com
indiebizadvocates.org
90nguyentuan.com
georgemuncey.com
ncn.nl
deziplan.ru
redctei.co
nbva.co.uk
webforsites.com
neolaiamedispa.com
askstaffing.com
sochi-okna23.ru
dnqa.co.uk
bohrlochversicherung.info
patassociation.com
test-teleachat.fr
xn--80abehgab4ak0ddz.xn--p1ai
t3brothers.com
dentallabor-luenen.de
tutvracks.com
wineandgo.hu
ronaldhendriks.nl
kryddersnapsen.dk
pazarspor.org.tr
levencovka.ru
enews-qca.com
hinotruckwreckers.com.au
domaine-des-pothiers.com
factorywizuk.com
welovecustomers.fr
forskolinslimeffect.net
spirello.nl
kelsigordon.com
polynine.com
creohn.de
dr-vita.de
gurutechnologies.net
ya-elka.ru
bringmehope.org
metallbau-hartmann.eu
mneti.ru
enactusnhlstenden.com
delegationhub.com
-
net
false
-
pid
38
-
prc
ocautoupds
mspub
mysqld
sqlwriter
sqbcoreservice
powerpnt
xfssvccon
infopath
tbirdconfig
mysqld_nt
visio
encsvc
mysqld_opt
msaccess
dbeng50
synctime
mydesktopqos
winword
outlook
oracle
onenote
sqlservr
ocomm
sqlbrowser
sqlagent
isqlplussvc
steam
excel
wordpad
ocssd
mydesktopservice
agntsvc
msftesql
thebat64
thunderbird
firefoxconfig
thebat
dbsnmp
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on you computer has expansion {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
379
-
svc
vss
backup
veeam
sql
svc$
mepocs
memtas
sophos
Extracted
C:\Users\04ms1v-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/10113FB3E12F88C4
http://decryptor.top/10113FB3E12F88C4
Extracted
C:\Users\p8r5hje9a6-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/A0FF73A6CB7351BC
http://decryptor.top/A0FF73A6CB7351BC
Targets
-
-
Target
c391755e39e2059d1b47385d7f6d55e9_JaffaCakes118
-
Size
164KB
-
MD5
c391755e39e2059d1b47385d7f6d55e9
-
SHA1
33cab61b3c36703d7a1918cdd0130b03b39ae1c1
-
SHA256
da3cd4f45cf5816ab7de2320ad1cf822df7f02afa2b667ba829700998e514f33
-
SHA512
60002a28402c66a6555932e301ac363187d404ce5e702b7d7aef33f1b72253ada5b5dc997e767b85ea0247e9aa4c78420e07dc94ac969dbcb6896da01aad3dad
-
SSDEEP
3072:WGYFrOdhfkQv9jrAprhFmyvEjQDKaUznxQa8OUSep6s:QadFkMGhFjED39WSf
Score10/10-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-