General
-
Target
c9c6939cb45bfd22d3b57537839a11ee_JaffaCakes118
-
Size
164KB
-
Sample
240829-2ndcmsveqe
-
MD5
c9c6939cb45bfd22d3b57537839a11ee
-
SHA1
9ed92175bc2fa9d0e501f9215723a3cf2515b2b0
-
SHA256
4478337abc2ec1030756e991d7d4633ad1c99574cba2ee34428cbd67f1e50f18
-
SHA512
ca8ae5c7a96b580aa1b130b543fc82764d09028c0a8ed8ad0a0bb7b0fa891d8f3bdd307868dfb39625af3bbc5818f2d23747d5cc73859df4ecb0443eb4f23dd2
-
SSDEEP
1536:FYVLroT4ciMeW75jVZF+pWGRjICS4At+GbvF0qcX8opz25maL3SUtNDWyPwop6in:FHixaVZFiOCDJtOicNDWEzZtaobOsB
Behavioral task
behavioral1
Sample
c9c6939cb45bfd22d3b57537839a11ee_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
sodinokibi
28
1180
teutoradio.de
randyabrown.com
k-zubki.ru
jacquesgarcianoto.com
vitormmcosta.com
gsconcretecoatings.com
innervisions-id.com
hawthornsretirement.co.uk
klapanvent.ru
aceroprime.com
awaitspain.com
janmorgenstern.com
agenceassemble.fr
andreaskildegaard.dk
forumsittard.nl
liepertgrafikweb.at
advance-refle.com
manzel.tn
craftron.com
hekecrm.com
drbenveniste.com
lesyeuxbleus.net
factorywizuk.com
pvandambv.nl
licensed-public-adjuster.com
zumrutkuyutemel.com
computer-place.de
wirmuessenreden.com
guohedd.com
istantidigitali.com
cmeow.com
oscommunity.de
fascaonline.com
domilivefurniture.com
alnectus.com
kombi-dress.com
parentsandkids.com
rvside.com
limounie.com
nexstagefinancial.com
ultimatelifesource.com
innersurrection.com
tutvracks.com
colored-shelves.com
koncept-m.ru
atrgroup.it
dogsunlimitedguide.com
onesynergyinternational.com
heuvelland-oaze.nl
rubyaudiology.com
dentalcircle.com
welovecustomers.fr
mondolandscapes.com
lexced.com
yourhappyevents.fr
imagine-entertainment.com
duthler.nl
alaskaremote.com
cookinn.nl
outstandingminialbums.com
hotjapaneselesbian.com
stanleyqualitysystems.com
mariamalmahdi.com
pubcon.com
thehovecounsellingpractice.co.uk
brighthillgroup.com
beauty-traveller.com
business-basic.de
paradigmlandscape.com
annenymus.com
housesofwa.com
morgansconsult.com
devus.de
hotelturbo.de
achetrabalhos.com
pourlabretagne.bzh
eventosvirtualesexitosos.com
traitware.com
airvapourbarrier.com
bourchier.org
frameshift.it
placermonticello.com
campusce.com
adabible.org
hepishopping.com
yvesdoin-aquarelles.fr
2020hindsight.info
johnstonmingmanning.com
test-teleachat.fr
the-beauty-guides.com
annida.it
mesajjongeren.nl
enactusnhlstenden.com
kryddersnapsen.dk
galatee-couture.com
dentallabor-luenen.de
valiant-voice.com
hvitfeldt.dk
riffenmattgarage.ch
kvetymichalovce.sk
allinonecampaign.com
michal-s.co.il
wrinstitute.org
springfieldplumbermo.com
ocduiblog.com
hnkns.com
fotoslubna.com
hartofurniture.com
broccolisoep.nl
therapybusinessacademy.com
marcandy.com
gardenpartner.pl
angelika-schwarz.com
aslog.fr
globalcompliancenews.com
taulunkartano.fi
fi-institutionalfunds.com
axisoflove.org:443
markseymourphotography.co.uk
iron-mine.ru
wribrazil.com
sytzedevries.com
bertbutter.nl
avtoboss163.ru:443
ayudaespiritualtamara.com
circuit-diagramz.com
claudiakilian.de
rentsportsequip.com
topvijesti.net
myplaywin3.com
indiebizadvocates.org
wasnederland.nl
pinkxgayvideoawards.com
sber-biznes.com
internalresults.com
qwikcoach.com
xtensifi.com
unislaw-narty.pl
eafx.pro
jimprattmediations.com
nginx.com
oththukaruva.com
photographycreativity.co.uk
grupoexin10.com
rsidesigns.com
latteswithleslie.com
cops4causes.org
futurenetworking.com
ilovefullcircle.com
greenrider.nl
casinodepositors.com
veggienessa.com
carolynfriedlander.com
denverwynkoopdentist.com
der-stempelking.de
jonnyhooley.com
sprintcoach.com
mayprogulka.ru
bmw-i-pure-impulse.com
kausette.com
patriotcleaning.net
site.markkit.com.br
relevantonline.eu
banksrl.co.za
muller.nl
sololibrerie.it
skoczynski.eu
miscbo.it
sharonalbrightdds.com
parseport.com
ilveshistoria.com
yuanshenghotel.com
kenmccallum.com
smartmind.net
aoyama.ac
simpleitsolutions.ch
trainiumacademy.com
jlwilsonbooks.com
schroederschoembs.com
projektparkiet.pl
qandmmusiccenter.com
ziliak.com
oro.ae
smartworkplaza.com
creohn.de
brannbornfastigheter.se
geoweb.software
dinecorp.com
metriplica.academy
oexebusiness.com
mac-computer-support-hamburg.de
richardmaybury.co.uk
lisa-poncon.fr
scietech.academy
mslp.org
cuadc.org
n-newmedia.de
aberdeenartwalk.org
kartuindonesia.com
rozmata.com
lagschools.ng
stagefxinc.com
mundo-pieces-auto.fr
santastoy.store
trevi-vl.ru
augen-praxisklinik-rostock.de
ronaldhendriks.nl
rolleepollee.com
ketomealprep.academy
kickittickets.com
bluelakevision.com
otpusk.zp.ua
belofloripa.be
rishigangoly.com
scentedlair.com
yayasanprimaunggul.org
sochi-okna23.ru
triplettagaite.fr
funworx.de
nxtstg.org
autoteamlast.de
barbaramcfadyenjewelry.com
catalyseurdetransformation.com
alharsunindo.com
eyedoctordallas.com
tbalp.co.uk
citydogslife.com
thestudio.academy
wineandgo.hu
mindsparkescape.com
internestdigital.com
penumbuhrambutkeiskei.com
eos-horlogerie.com
techybash.com
circlecitydj.com
amelielecompte.wordpress.com
renderbox.ch
gavelmasters.com
letsstopsmoking.co.uk
thenalpa.com
happycatering.de
richardkershawwines.co.za
dnqa.co.uk
eurethicsport.eu
hypogenforensic.com
texanscan.org
from02pro.com
palmecophilippines.com
mollymccarthydesign.com
supercarhire.co.uk
linkbuilding.life
diverfiestas.com.es
crestgood.com
heimdalbygg.no
nevadaruralhousingstudies.org
wallflowersandrakes.com
memphishealthandwellness.com
babysitting-hk.helpergo.co
datatri.be
julielusktherapy.com
moira-cristescu.com
polynine.com
arthakapitalforvaltning.dk
1deals.com
onlinemarketingsurgery.co.uk
hom-frisor.dk
cascinarosa33.it
mariannelemenestrel.com
mercadodelrio.com
haard-totaal.nl
racefietsenblog.nl
stoneridgemontessori.com
abulanov.com
hospitalitytrainingsolutions.co.uk
jobkiwi.com.ng
larchwoodmarketing.com
finsahome.co.uk
quitescorting.com
boyfriendsgoal.site
pharmeko-group.com
web865.com
volta.plus
triavlete.com
paardcentraal.nl
eshop.design
renehartman.nl
logosindustries.com
zdrowieszczecin.pl
nalliasmali.net
campusescalade.com
clemenfoto.dk
wyreforest.net
kerstliedjeszingen.nl
endstarvation.com
ivancacu.com
afbudsrejserallinclusive.dk
lmmont.sk
forskolinslimeffect.net
efficiencyconsulting.es
thiagoperez.com
perfectgrin.com
rs-danmark.dk
nutriwell.com.sg
landgoedspica.nl
collegetennis.info
ntinasfiloxenia.gr
forextimes.ru
dmlcpa.com
so-sage.fr
putzen-reinigen.com
aidanpublishing.co.uk
myfbateam.com
gbk-tp1.de
natturestaurante.com.br
alexwenzel.de
rechtenplicht.be
fridakids.com
cincinnatiphotocompany.org
queertube.net
gaearoyals.com
monstarrsoccer.com
theatre-embellie.fr
bcabattoirs.org
nationnewsroom.com
finnergo.eu
cl0nazepamblog.com
bellesiniacademy.org
bumbipdeco.site
smarttourism.academy
agendatwentytwenty.com
livelai.com
agriturismocastagneto.it
the3-week-diet.net
epicjapanart.com
ludoil.it
apiarista.de
pxsrl.it
sppdstats.com
masecologicos.com
zuerich-umzug.ch
mazzaropi.com.br
5thactors.com
catchup-mag.com
airserviceunlimited.com
apmollerpension.com
insane.agency
xrresources.com
cyberpromote.de
corporacionrr.com
cardsandloyalty.com
stressreliefadvice.com
carsten.sparen-it.de
awag-blog.de
greeneyetattoo.com
encounter-p.net
eatyoveges.com
imaginekithomes.co.nz
mustangmarketinggroup.com
lattalvor.com
tatyanakopieva.ru
condormobile.fr
suonenjoen.fi
lsngroupe.com
piestar.com
atelierkomon.com
mazift.dk
sjtpo.org
tweedekansenloket.nl
mrmac.com
teamsegeln.ch
pajagus.fr
shrinkingplanet.com
christopherhannan.com
profibersan.com
mangimirossana.it
jmmartinezilustrador.com
ya-elka.ru
aheadloftladders.co.uk
mensemetgesigte.co.za
bescomedical.de
beandrivingschool.com.au
skooppi.fi
smartspeak.com
brownswoodblog.com
rossomattonecase.it
dinedrinkdetroit.com
leansupremegarcinia.net
grancanariaregional.com
acb-gruppe.ch
ced-elec.com
saboboxtel.uk
qrs-international.com
redpebblephotography.com
uci-france.fr
margaretmcshane.com
glende-pflanzenparadies.de
keuken-prijs.nl
oncarrot.com
brinkdoepke.eu
optigas.com
energosbit-rp.ru
reizenmetkinderen.be
chris-anne.com
line-x.co.uk
photonag.com
subyard.com
pansionatblago.ru
linearete.com
mediahub.co.nz
focuskontur.com
phoenixcrane.com
pro-gamer.pl
katherinealy.com
magnetvisual.com
block-optic.com
nykfdyrehospital.dk
tilldeeke.de
blavait.fr
skyboundnutrition.co.uk
11.in.ua
ikadomus.com
askstaffing.com
laylavalentine.com
ahgarage.com
bilius.dk
distrifresh.com
concontactodirecto.com
teethinadaydentalimplants.com
mind2muscle.nl
thepixelfairy.com
altitudeboise.com
skinkeeper.li
schlagbohrmaschinetests.com
pedmanson.com
shortsalemap.com
tecleados.com
happylublog.wordpress.com
leopoldineroux.com
vvego.com
alcye.com
g2mediainc.com
rapid5kloan.org
auberives-sur-vareze.fr
go.labibini.ch
bodymindchallenger.com
atma.nl
avisioninthedesert.com
blucamp.com
opticahubertruiz.com
jag.me
rename.kz
gosouldeep.com
tetameble.pl
palema.gr
cotton-avenue.co.il
goddardleadership.org
boomerslivinglively.com
ronielyn.com
antesacademy.it
proffteplo.com
jameswilliamspainting.com
amorbellezaysalud.com
hoteltantra.com
mursall.de
vitoriaecoturismo.com.br
drnelsonpediatrics.com
activeterroristwarningcompany.com
makingmillionaires.net
littlesaints.academy
lifeinbreaths.com
tieronechic.com
kiraribeaute-nani.com
strauchs-wanderlust.info
reputation-medical.online
kemtron.fr
witraz.pl
kuriero.pro
tramadolhealth.com
salonlamar.nl
sunsolutions.es
golfclublandgoednieuwkerk.nl
startuplive.org
descargandoprogramas.com
jollity.hu
secrets-clubs.co.uk
jlgraphisme.fr
elex.is
saberconcrete.com
frimec-international.es
maryairbnb.wordpress.com
vdolg24.online
khtrx.com
berdonllp.com
dantreranch.com
pazarspor.org.tr
matthieupetel.fr
fysiotherapierijnmond.nl
medicalsupportco.com
dibli.store
premier-iowa.com
comoserescritor.com
alisodentalcare.com
lidkopingsnytt.nu
pankiss.ru
metcalfe.ca
luvbec.com
fla.se
endlessrealms.net
tradenavigator.ch
advanced-removals.co.uk
olry-cloisons.fr
a-zpaperwork.eu
denhaagfoodie.nl
apogeeconseils.fr
spartamovers.com
goodboyscustom.com
thegrinningmanmusical.com
innovationgames-brabant.nl
nvisionsigns.com
buffdaddyblog.com
gta-jjb.fr
chatberlin.de
orchardbrickwork.com
ninjaki.com
cmascd.com
humanviruses.org
perceptdecor.com
azerbaycanas.com
curtsdiscountguns.com
m2graph.fr
lgiwines.com
lumturo.academy
goeppinger-teppichreinigung.de
metallbau-hartmann.eu
metroton.ru
bringmehope.org
burg-zelem.de
bluemarinefoundation.com
die-immo-agentur.de
dayenne-styling.nl
radishallgood.com
dr-vita.de
ramirezprono.com
stabilisateur.fr
speiserei-hannover.de
floweringsun.org
theintellect.edu.pk
o90.dk
naukaip.ru
martha-frets-ceramics.nl
karmeliterviertel.com
michaelfiegel.com
patassociation.com
buonabitare.com
skolaprome.eu
artvark.nl
uncensoredhentaigif.com
belinda.af
foerderverein-vatterschule.de
reygroup.pt
thesilkroadny.com
hiddensee-buhne11.de
betterce.com
iactechnologies.net
artcase.pl
cp-bap.de
rhino-turf.com
dieetuniversiteit.nl
ingresosextras.online
invela.dk
slotenmakerszwijndrecht.nl
lookandseen.com
craftingalegacy.com
noda.com.ua
ykobbqchicken.ca
lovcase.com
kroophold-sjaelland.dk
purepreprod4.com
prometeyagro.com.ua
oportowebdesign.com
grafikstudio-visuell.de
karelinjames.com
wg-heiligenstadt.de
centuryvisionglobal.com
redctei.co
primemarineengineering.com
bayshoreelite.com
rattanwarehouse.co.uk
biblica.com
bajova.sk
tellthebell.website
andermattswisswatches.ch
adaduga.info
kompresory-opravy.com
angelsmirrorus.com
sellthewrightway.com
profiz.com
sbit.ag
latableacrepes-meaux.fr
theater-lueneburg.de
cap29010.it
charlottelhanna.com
imajyuku-sozoku.com
scotlandsroute66.co.uk
thegetawaycollective.com
ijsselbeton.nl
alattekniksipil.com
successcolony.com.ng
spectamarketingdigital.com.br
k-v-f.de
xn--80addfr4ahr.dp.ua
dennisverschuur.com
netadultere.fr
brunoimmobilier.com
drvoip.com
pinthelook.com
arearugcleaningnyc.com
wademurray.com
acumenconsultingcompany.com
mrkluttz.com
baptistdistinctives.org
cc-experts.de
biodentify.ai
greatofficespaces.net
irizar.com
levencovka.ru
pokemonturkiye.com
goodherbalhealth.com
jax-interim-and-projectmanagement.com
signamedia.de
hawaiisteelbuilding.com
sealgrinderpt.com
zinnystar.com
ideamode.com
kdbrh.com
mindfuelers.com
jobscore.com
elitkeramika-shop.com.ua
turing.academy
bavovrienden.nl
ncn.nl
anleggsregisteret.no
omnicademy.com
b3b.ch
liverpoolabudhabi.ae
watchsale.biz
onlinetvgroup.com
glas-kuck.de
tzn.nu
harleystreetspineclinic.com
omegamarbella.com
legundschiess.de
cssp-mediation.org
leadforensics.com
nourella.com
agora-collectivites.com
hameghlim.com
elliemaccreative.wordpress.com
scholarquotes.com
fire-space.com
biketruck.de
t3brothers.com
sycamoregreenapts.com
rtc24.com
nepressurecleaning.com
neonodi.be
kelsigordon.com
acibademmobil.com.tr
fanuli.com.au
fotoeditores.com
protoplay.ca
breathebettertolivebetter.com
tastevirginia.com
aciscomputers.com
initconf.com
skyscanner.ro
martinipstudios.com
awaisghauri.com
cxcompany.com
bruut.online
parisschool.ru
rarefoods.ro
jaaphoekzema.nl
cormanmarketing.com
verbouwingsdouche.nl
saint-malo-developpement.fr
factoriareloj.com
etgdogz.de
zorgboerderijravensbosch.nl
solidhosting.nl
hostastay.com
5pointpt.com
hm-com.com
fsbforsale.com
ebible.co
kristianboennelykke.dk
oraweb.net
gatlinburgcottage.com
c-sprop.com
galaniuklaw.com
prodentalblue.com
bjornvanvulpen.nl
angeleyezstripclub.com
stringnosis.academy
deziplan.ru
osn.ro
midwestschool.org
craftstone.co.nz
o2o-academy.com
aktivfriskcenter.se
davedavisphotos.com
eksperdanismanlik.com
toranjtuition.org
coachpreneuracademy.com
hostingbangladesh.net
universelle.fr
ox-home.com
nauticmarine.dk
stralsund-ansichten.de
malevannye.ru
schluesseldienste-hannover.de
rivermusic.nl
look.academy
stage-infirmier.fr
matteoruzzaofficial.com
ciga-france.fr
cleanroomequipment.ie
zealcon.ae
citiscapes-art.com
ikzoekgod.be
speakaudible.com
selected-minds.de
pixelhealth.net
devplus.be
cymru.futbol
animalfood-online.de
druktemakersheerenveen.nl
furland.ru
cesep2019.com
ruggestar.ch
sambaglow.com
loparnille.se
subquercy.fr
zwemofficial.nl
designimage.ae
acornishstudio.co.uk
log-barn.co.uk
jdscenter.com
rentingwell.com
agencewho-aixenprovence.fr
nrgvalue.com
breakluckrecords.com
amyandzac.com
justaroundthecornerpetsit.com
satoblog.org
janasfokus.com
electricianul.com
palmenhaus-erfurt.de
switch-made.com
transifer.fr
jefersonalessandro.com
paprikapod.com
chainofhopeeurope.eu
billscars.net
xn--ziinoapte-6ld.ro
kryptos72.com
mediabolmong.com
tesisatonarim.com
leijstrom.com
frankgoll.com
raeoflightmusic.com
ceocenters.com
alpesiberie.com
flossmoordental.com
donau-guides.eu
docarefoundation.org
jeanmonti.com
pays-saint-flour.fr
voetbalhoogeveen.nl
bohrlochversicherung.info
molinum.pt
unexplored.gr
liveyourheartout.co
professionetata.com
mike.matthies.de
min-virksomhed.dk
rokthetalk.com
billigeflybilletter.dk
leloupblanc.gr
3daywebs.com
inewsstar.com
drbrianhweeks.com
cainlaw-okc.com
yourcosmicbeing.com
customroasts.com
operativadigital.com
geitoniatonaggelon.gr
fitnessblenderstory.com
fluzfluzrewards.com
ravage-webzine.nl
hensleymarketing.com
astrographic.com
easydental.ae
baita.ac
bendel-partner.de
direitapernambuco.com
ledyoucan.com
kellengatton.com
globalskills.pt
aquacheck.co.za
fskhjalmar.se
fbmagazine.ru
birthplacemag.com
livedeveloper.com
yournextshoes.com
peninggibadan.co.id
edrickennedymacfoy.com
gratiocafeblog.wordpress.com
georgemuncey.com
leatherjees.com
interlinkone.com
ddmgen.com
production-stills.co.uk
graygreenbiomedservices.com
envomask.com
spirello.nl
tanatek.com
buerocenter-butzbach-werbemittel.de
handyman-silkeborg.dk
slotspinner.com
chomiksy.net
stathmoulis.gr
tages-geldvergleich.de
parksideseniorliving.net
rhino-storage.co.uk
levelseven.be
christianscholz.de
charlesfrancis.photos
the5thquestion.com
chorusconsulting.net
solutionshosting.co.uk
suitesartemis.gr
motocrossplace.co.uk
jakubrybak.com
krishnabrawijaya.com
victorvictoria.com
rizplakatjaya.com
fta-media.com
90nguyentuan.com
mbuildinghomes.com
catering.com
alltagsrassismus-entknoten.de
mieleshopping.it
silverbird.dk
nieuwsindeklas.be
delegationhub.com
magrinya.net
auto-opel.ro
holocine.de
pisofare.co
slideevents.be
iexpert99.com
schulz-moelln.de
campinglaforetdetesse.com
albcleaner.fr
dierenambulancealkmaar.nl
basindentistry.com
lovetzuchia.com
adterium.com
dentourage.com
amco.net.au
daveystownhouse.com
mediogiro.com.ar
singletonfinancial.com
opt4cdi.com
fazagostar.co
janellrardon.com
fidelitytitleoregon.com
arazi.eus
keyboardjournal.com
nicksrock.com
bundan.com
nbva.co.uk
worldproskitour.com
bratek-immobilien.de
carmel-york.com
clinic-beethovenstrasse-ag.ch
shortysspices.com
banukumbak.com
eastgrinsteadwingchun.com
boloria.de
csaballoons.com
bakingismyyoga.com
epsondriversforwindows.com
silkeight.com
agrifarm.dk
framemyballs.com
mgimalta.com
advesa.com
whoopingcrane.com
haus-landliebe.de
azloans.com
domaine-des-pothiers.com
alene.co
vedsegaard.dk
arabianmice.com
alwaysdc.com
explora.nl
mrcar.nl
muni.pe
expohomes.com
powershell.su
bychowo.pl
pilotgreen.com
advancedeyecare.com
publicompserver.de
enews-qca.com
newonestop.com
topautoinsurers.net
rino-gmbh.com
specialtyhomeservicesllc.com
ygallerysalonsoho.com:443
tchernia-conseil.fr
bluetenreich-brilon.de
alabamaroofingllc.com
xn--80abehgab4ak0ddz.xn--p1ai
pureelements.nl
fann.ru
tothebackofthemoon.com
ufovidmag.com
johnsonweekly.com
modamarfil.com
almamidwifery.com
kamin-somnium.de
zaczytana.com
precisetemp.com
lyricalduniya.com
napisat-pismo-gubernatoru.ru:443
mikegoodfellow.co.uk
akwaba-safaris.com
bonitabeachassociation.com
phukienbepthanhdat.com
jayfurnitureco.com
xn--billigafrgpatroner-stb.se
laaisterplakky.nl
dreamvoiceclub.org
baikalflot.ru
jalkapuu.net
jglconsultancy.com
diakonie-weitramsdorf-sesslach.de
bcmets.info
unboxtherapy.site
itheroes.dk
altocontatto.net
skidpiping.de
walterman.es
bubbalucious.com
directique.com
peppergreenfarmcatering.com.au
adedesign.com
weddingceremonieswithtim.com
physio-lang.de
studionumerik.fr
juergenblaetz.de
animation-pro.co.uk
lapponiasafaris.com
voice2biz.com
lunoluno.com
111firstdelray.com
towelroot.co
wordpress.idium.no
cac2040.com
trivselsguide.dk
mariajosediazdemera.com
husetsanitas.dk
lollachiro.com
mahikuchen.com
9nar.com
groovedealers.ru
blueridgeheritage.com
andrealuchesi.it
mjk.digital
molade.nl
lassocrm.com
four-ways.com
johnkoen.com
edvestors.org
theboardroomafrica.com
anchelor.com
triplettabordeaux.fr
dcc-eu.com
bulyginnikitav.000webhostapp.com
soncini.ch
ncjc.ca
sveneulberg.de
egpu.fr
vipcarrental.ae
sshomme.com
vapiano.fr
limmortelyouth.com
billyoart.com
kafkacare.com
sarahspics.co.uk
digitale-elite.de
buzzneakers.com
bd2fly.com
girlish.ae
kookooo.com
avis.mantova.it
poems-for-the-soul.ch
malzomattalar.com
testitjavertailut.net
louiedager.com
the-cupboard.co.uk
chatterchatterchatter.com
stitch-n-bitch.com
deduktia.fi
signededenroth.dk
gurutechnologies.net
glennverschueren.be
plbinsurance.com
fixx-repair.com
nepal-pictures.com
hinotruckwreckers.com.au
gazelle-du-web.com
akcadagofis.com
p-ride.live
sachainchiuk.com
narca.net
jobstomoveamerica.org
asiaartgallery.jp
smartercashsystem.com
baumfinancialservices.com
bridalcave.com
evsynthacademy.org
bg.szczecin.pl
jandhpest.com
ownidentity.com
global-migrate.com
utilisacteur.fr
luvinsburger.fr
neolaiamedispa.com
webforsites.com
letterscan.de
spacebel.be
soundseeing.net
loysonbryan.com
thisprettyhair.com
nuohous.com
hutchstyle.co.uk
lashandbrowenvy.com
richardiv.com
benchbiz.com
kosten-vochtbestrijding.be
maxcube24.com.ua
bookingwheel.com
marmarabasin.com
promus.ca
mneti.ru
brisbaneosteopathic.com.au
terraflair.de
bagaholics.in
motocrosshideout.com
bodet150ans.com
entdoctor-durban.com
chinowarehousespace.com
mamajenedesigns.com
affligemsehondenschool.be
sweetz.fr
premiumweb.com.ua:443
hostaletdelsindians.es
werkzeugtrolley.net
espaciopolitica.com
-
net
true
-
pid
28
-
prc
sqbcoreservice
infopath
wordpa
agntsvc
ocomm
outlook
steam
dbeng50
synctime
powerpnt
winword
isqlplussvc
oracle
excel
msaccess
onenote
mydesktopservice
xfssvccon
thunderbird
firefox
sql
mydesktopqos
ocssd
mspub
ocautoupds
encsvc
visio
dbsnmp
tbirdconfig
thebat
-
ransom_oneliner
All of your files are encrypted! Find {EXT}_Wannadie.txt and follow instructions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
1180
-
svc
vss
veeam
svc$
backup
mepocs
sophos
memtas
sql
Extracted
C:\Recovery\mfmlw_Wannadie.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/7EBEC4F643D8397C
http://decryptor.top/7EBEC4F643D8397C
Targets
-
-
Target
c9c6939cb45bfd22d3b57537839a11ee_JaffaCakes118
-
Size
164KB
-
MD5
c9c6939cb45bfd22d3b57537839a11ee
-
SHA1
9ed92175bc2fa9d0e501f9215723a3cf2515b2b0
-
SHA256
4478337abc2ec1030756e991d7d4633ad1c99574cba2ee34428cbd67f1e50f18
-
SHA512
ca8ae5c7a96b580aa1b130b543fc82764d09028c0a8ed8ad0a0bb7b0fa891d8f3bdd307868dfb39625af3bbc5818f2d23747d5cc73859df4ecb0443eb4f23dd2
-
SSDEEP
1536:FYVLroT4ciMeW75jVZF+pWGRjICS4At+GbvF0qcX8opz25maL3SUtNDWyPwop6in:FHixaVZFiOCDJtOicNDWEzZtaobOsB
Score10/10-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
Sets desktop wallpaper using registry
-