General
-
Target
d0190f94e6d05104977c53b55dbc2911_JaffaCakes118
-
Size
179KB
-
Sample
240906-v82seazbjl
-
MD5
d0190f94e6d05104977c53b55dbc2911
-
SHA1
c0ff002b0e26b180a741c3cefff15190df7746cc
-
SHA256
f4e5d7a95681d920dda75fe5dd89be249905e2a7712f9b3b39e19351f5ef5e69
-
SHA512
d4b1cc032f9d8254ac6035c27948147d8c4c5f60be51e632ba26c6e34ada87515b3113b4bd1cec3cedfa1a73c465a1267681ca05356d8f2f08d81c4fef04d868
-
SSDEEP
3072:LNKQ4JTBg0Q8F63VETed7/kBazzFbULpC15RM:LNn4FQS63VE6F/M4qE15
Behavioral task
behavioral1
Sample
d0190f94e6d05104977c53b55dbc2911_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0190f94e6d05104977c53b55dbc2911_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
sodinokibi
19
96
speiserei-hannover.de
delegationhub.com
subyard.com
martha-frets-ceramics.nl
hostastay.com
luvbec.com
dayenne-styling.nl
111firstdelray.com
lidkopingsnytt.nu
fbmagazine.ru
peppergreenfarmcatering.com.au
ya-elka.ru
mundo-pieces-auto.fr
mediabolmong.com
yuanshenghotel.com
fidelitytitleoregon.com
penumbuhrambutkeiskei.com
2020hindsight.info
aslog.fr
teethinadaydentalimplants.com
baumfinancialservices.com
business-basic.de
awaitspain.com
apiarista.de
moira-cristescu.com
reizenmetkinderen.be
min-virksomhed.dk
altocontatto.net
etgdogz.de
beandrivingschool.com.au
kvetymichalovce.sk
breathebettertolivebetter.com
fla.se
rentingwell.com
iron-mine.ru
hinotruckwreckers.com.au
endlessrealms.net
matteoruzzaofficial.com
signamedia.de
dreamvoiceclub.org
parksideseniorliving.net
redpebblephotography.com
palmenhaus-erfurt.de
omnicademy.com
spartamovers.com
catering.com
from02pro.com
kryddersnapsen.dk
rvside.com
mike.matthies.de
gardenpartner.pl
internalresults.com
descargandoprogramas.com
publicompserver.de
soundseeing.net
lagschools.ng
anleggsregisteret.no
onlinetvgroup.com
physio-lang.de
insane.agency
andermattswisswatches.ch
professionetata.com
casinodepositors.com
cxcompany.com
elitkeramika-shop.com.ua
glende-pflanzenparadies.de
1deals.com
broccolisoep.nl
aquacheck.co.za
axisoflove.org:443
tilldeeke.de
blueridgeheritage.com
lifeinbreaths.com
welovecustomers.fr
oro.ae
walterman.es
justaroundthecornerpetsit.com
o90.dk
finsahome.co.uk
domaine-des-pothiers.com
rapid5kloan.org
supercarhire.co.uk
pilotgreen.com
bg.szczecin.pl
furland.ru
zaczytana.com
lassocrm.com
alharsunindo.com
nicksrock.com
agendatwentytwenty.com
circuit-diagramz.com
invela.dk
ketomealprep.academy
baikalflot.ru
photonag.com
allinonecampaign.com
campusce.com
dinedrinkdetroit.com
buerocenter-butzbach-werbemittel.de
fotoeditores.com
singletonfinancial.com
billscars.net
kompresory-opravy.com
lovetzuchia.com
saboboxtel.uk
utilisacteur.fr
linkbuilding.life
schlagbohrmaschinetests.com
tages-geldvergleich.de
cymru.futbol
skyscanner.ro
baptistdistinctives.org
schroederschoembs.com
lumturo.academy
circlecitydj.com
voetbalhoogeveen.nl
perceptdecor.com
inewsstar.com
globalcompliancenews.com
santastoy.store
mieleshopping.it
noda.com.ua
zorgboerderijravensbosch.nl
kookooo.com
zinnystar.com
imajyuku-sozoku.com
epsondriversforwindows.com
gsconcretecoatings.com
yournextshoes.com
arearugcleaningnyc.com
tanatek.com
christopherhannan.com
leijstrom.com
pxsrl.it
tastevirginia.com
opticahubertruiz.com
cesep2019.com
katherinealy.com
bendel-partner.de
towelroot.co
ddmgen.com
artcase.pl
rhino-turf.com
jdscenter.com
wademurray.com
so-sage.fr
frankgoll.com
reputation-medical.online
tradenavigator.ch
alcye.com
midwestschool.org
thenalpa.com
xn--80abehgab4ak0ddz.xn--p1ai
nevadaruralhousingstudies.org
stralsund-ansichten.de
secrets-clubs.co.uk
breakluckrecords.com
opt4cdi.com
ijsselbeton.nl
werkzeugtrolley.net
aciscomputers.com
zealcon.ae
leatherjees.com
sharonalbrightdds.com
klapanvent.ru
jlgraphisme.fr
expohomes.com
sycamoregreenapts.com
test-teleachat.fr
maryairbnb.wordpress.com
cmeow.com
xrresources.com
bcabattoirs.org
hotjapaneselesbian.com
campusescalade.com
hartofurniture.com
elliemaccreative.wordpress.com
innersurrection.com
agenceassemble.fr
oportowebdesign.com
heuvelland-oaze.nl
skyboundnutrition.co.uk
yayasanprimaunggul.org
keyboardjournal.com
fskhjalmar.se
sveneulberg.de
jobkiwi.com.ng
cyberpromote.de
jonnyhooley.com
larchwoodmarketing.com
wribrazil.com
belofloripa.be
janellrardon.com
jobstomoveamerica.org
dmlcpa.com
licensed-public-adjuster.com
web865.com
uci-france.fr
testitjavertailut.net
amelielecompte.wordpress.com
jax-interim-and-projectmanagement.com
dnqa.co.uk
metriplica.academy
hepishopping.com
cmascd.com
fi-institutionalfunds.com
ncjc.ca
basindentistry.com
concontactodirecto.com
hotelturbo.de
latteswithleslie.com
xn--billigafrgpatroner-stb.se
enactusnhlstenden.com
letsstopsmoking.co.uk
eurethicsport.eu
sellthewrightway.com
mbuildinghomes.com
springfieldplumbermo.com
dennisverschuur.com
sprintcoach.com
rtc24.com
neolaiamedispa.com
raeoflightmusic.com
rsidesigns.com
volta.plus
polynine.com
mustangmarketinggroup.com
tzn.nu
profiz.com
acornishstudio.co.uk
beauty-traveller.com
leopoldineroux.com
husetsanitas.dk
schluesseldienste-hannover.de
davedavisphotos.com
adaduga.info
cotton-avenue.co.il
eshop.design
iexpert99.com
direitapernambuco.com
flossmoordental.com
bumbipdeco.site
chris-anne.com
alexwenzel.de
therapybusinessacademy.com
startuplive.org
thesilkroadny.com
bookingwheel.com
catchup-mag.com
pazarspor.org.tr
o2o-academy.com
block-optic.com
distrifresh.com
mind2muscle.nl
cuadc.org
saberconcrete.com
mazift.dk
orchardbrickwork.com
housesofwa.com
christianscholz.de
biketruck.de
kuriero.pro
wallflowersandrakes.com
p-ride.live
molinum.pt
colored-shelves.com
bajova.sk
tbalp.co.uk
studionumerik.fr
energosbit-rp.ru
janmorgenstern.com
jefersonalessandro.com
margaretmcshane.com
agencewho-aixenprovence.fr
globalskills.pt
jameswilliamspainting.com
liverpoolabudhabi.ae
janasfokus.com
edrickennedymacfoy.com
designimage.ae
palema.gr
forskolinslimeffect.net
11.in.ua
vipcarrental.ae
edvestors.org
goodboyscustom.com
gavelmasters.com
the-beauty-guides.com
goddardleadership.org
goeppinger-teppichreinigung.de
nauticmarine.dk
bodet150ans.com
osn.ro
bringmehope.org
bychowo.pl
golfclublandgoednieuwkerk.nl
ciga-france.fr
rename.kz
mjk.digital
eastgrinsteadwingchun.com
eos-horlogerie.com
imaginekithomes.co.nz
jacquesgarcianoto.com
guohedd.com
cascinarosa33.it
deduktia.fi
successcolony.com.ng
focuskontur.com
riffenmattgarage.ch
strauchs-wanderlust.info
oexebusiness.com
ziliak.com
forumsittard.nl
bd2fly.com
weddingceremonieswithtim.com
pharmeko-group.com
glas-kuck.de
finnergo.eu
carmel-york.com
nourella.com
mamajenedesigns.com
stagefxinc.com
angelsmirrorus.com
levencovka.ru
transifer.fr
fridakids.com
silkeight.com
kemtron.fr
dierenambulancealkmaar.nl
endstarvation.com
unboxtherapy.site
muller.nl
bluemarinefoundation.com
gurutechnologies.net
brannbornfastigheter.se
markseymourphotography.co.uk
birthplacemag.com
gbk-tp1.de
bundan.com
unexplored.gr
mindsparkescape.com
agora-collectivites.com
csaballoons.com
bakingismyyoga.com
alpesiberie.com
aheadloftladders.co.uk
b3b.ch
xn--80addfr4ahr.dp.ua
solutionshosting.co.uk
theater-lueneburg.de
randyabrown.com
napisat-pismo-gubernatoru.ru:443
vdolg24.online
adabible.org
airserviceunlimited.com
kombi-dress.com
curtsdiscountguns.com
relevantonline.eu
laaisterplakky.nl
anchelor.com
rishigangoly.com
watchsale.biz
nxtstg.org
alnectus.com
yourhappyevents.fr
rhino-storage.co.uk
bratek-immobilien.de
jandhpest.com
makingmillionaires.net
liveyourheartout.co
natturestaurante.com.br
handyman-silkeborg.dk
cookinn.nl
precisetemp.com
schulz-moelln.de
affligemsehondenschool.be
karelinjames.com
mrcar.nl
queertube.net
brownswoodblog.com
90nguyentuan.com
ruggestar.ch
purepreprod4.com
arazi.eus
valiant-voice.com
medicalsupportco.com
sber-biznes.com
miscbo.it
traitware.com
omegamarbella.com
harleystreetspineclinic.com
alaskaremote.com
triplettagaite.fr
bohrlochversicherung.info
efficiencyconsulting.es
fta-media.com
ykobbqchicken.ca
ledyoucan.com
envomask.com
kausette.com
martinipstudios.com
dentallabor-luenen.de
veggienessa.com
tutvracks.com
vedsegaard.dk
four-ways.com
mesajjongeren.nl
catalyseurdetransformation.com
grafikstudio-visuell.de
laylavalentine.com
altitudeboise.com
naukaip.ru
lollachiro.com
stringnosis.academy
pankiss.ru
innovationgames-brabant.nl
banukumbak.com
boloria.de
irizar.com
khtrx.com
ludoil.it
kryptos72.com
logosindustries.com
greeneyetattoo.com
the-cupboard.co.uk
mrkluttz.com
k-v-f.de
thepixelfairy.com
salonlamar.nl
lattalvor.com
rolleepollee.com
ronielyn.com
5thactors.com
clemenfoto.dk
wineandgo.hu
rossomattonecase.it
stoneridgemontessori.com
optigas.com
rentsportsequip.com
epicjapanart.com
brunoimmobilier.com
girlish.ae
zuerich-umzug.ch
easydental.ae
slotenmakerszwijndrecht.nl
skooppi.fi
rivermusic.nl
luvinsburger.fr
keuken-prijs.nl
slotspinner.com
eafx.pro
kenmccallum.com
benchbiz.com
galaniuklaw.com
fysiotherapierijnmond.nl
zumrutkuyutemel.com
bescomedical.de
dr-vita.de
powershell.su
denverwynkoopdentist.com
docarefoundation.org
ahgarage.com
arthakapitalforvaltning.dk
brinkdoepke.eu
leansupremegarcinia.net
peninggibadan.co.id
hiddensee-buhne11.de
nginx.com
azloans.com
bjornvanvulpen.nl
tesisatonarim.com
site.markkit.com.br
mursall.de
profibersan.com
solidhosting.nl
yourcosmicbeing.com
ceocenters.com
tatyanakopieva.ru
jobscore.com
artvark.nl
thegrinningmanmusical.com
bourchier.org
lesyeuxbleus.net
groovedealers.ru
triavlete.com
latableacrepes-meaux.fr
bagaholics.in
electricianul.com
alabamaroofingllc.com
perfectgrin.com
putzen-reinigen.com
fotoslubna.com
eatyoveges.com
nieuwsindeklas.be
trainiumacademy.com
mariajosediazdemera.com
radishallgood.com
whoopingcrane.com
daveystownhouse.com
oththukaruva.com
a-zpaperwork.eu
dieetuniversiteit.nl
go.labibini.ch
thestudio.academy
istantidigitali.com
louiedager.com
factoriareloj.com
cp-bap.de
hutchstyle.co.uk
advanced-removals.co.uk
cops4causes.org
mediogiro.com.ar
chatberlin.de
iactechnologies.net
chomiksy.net
mensemetgesigte.co.za
glennverschueren.be
geoweb.software
matthieupetel.fr
leloupblanc.gr
global-migrate.com
otpusk.zp.ua
limmortelyouth.com
buffdaddyblog.com
chatterchatterchatter.com
blucamp.com
deziplan.ru
proffteplo.com
fitnessblenderstory.com
akcadagofis.com
molade.nl
tetameble.pl
airvapourbarrier.com
mindfuelers.com
richardkershawwines.co.za
ikadomus.com
nalliasmali.net
sjtpo.org
eksperdanismanlik.com
awaisghauri.com
ocduiblog.com
atrgroup.it
happycatering.de
factorywizuk.com
kelsigordon.com
silverbird.dk
futurenetworking.com
encounter-p.net
wordpress.idium.no
nepressurecleaning.com
jalkapuu.net
myfbateam.com
nrgvalue.com
jakubrybak.com
rino-gmbh.com
johnkoen.com
smartworkplaza.com
animalfood-online.de
fascaonline.com
egpu.fr
ayudaespiritualtamara.com
primemarineengineering.com
triplettabordeaux.fr
lisa-poncon.fr
itheroes.dk
saint-malo-developpement.fr
cardsandloyalty.com
myplaywin3.com
topautoinsurers.net
reygroup.pt
xn--ziinoapte-6ld.ro
campinglaforetdetesse.com
ivancacu.com
sarahspics.co.uk
kafkacare.com
dogsunlimitedguide.com
galatee-couture.com
amyandzac.com
bridalcave.com
smarttourism.academy
alltagsrassismus-entknoten.de
aberdeenartwalk.org
andrealuchesi.it
cc-experts.de
azerbaycanas.com
sytzedevries.com
uncensoredhentaigif.com
kamin-somnium.de
operativadigital.com
suonenjoen.fi
bavovrienden.nl
condormobile.fr
rechtenplicht.be
zdrowieszczecin.pl
log-barn.co.uk
skoczynski.eu
mgimalta.com
craftingalegacy.com
jimprattmediations.com
citydogslife.com
rattanwarehouse.co.uk
mazzaropi.com.br
hekecrm.com
pvandambv.nl
onesynergyinternational.com
claudiakilian.de
advesa.com
parentsandkids.com
sppdstats.com
suitesartemis.gr
rarefoods.ro
adedesign.com
hospitalitytrainingsolutions.co.uk
trivselsguide.dk
rozmata.com
turing.academy
techybash.com
grupoexin10.com
asiaartgallery.jp
sshomme.com
pureelements.nl
sunsolutions.es
fire-space.com
patriotcleaning.net
agrifarm.dk
augen-praxisklinik-rostock.de
geitoniatonaggelon.gr
shortysspices.com
bodymindchallenger.com
bayshoreelite.com
goodherbalhealth.com
subquercy.fr
sololibrerie.it
michal-s.co.il
patassociation.com
jayfurnitureco.com
thisprettyhair.com
ncn.nl
animation-pro.co.uk
leadforensics.com
fluzfluzrewards.com
stathmoulis.gr
loparnille.se
pedmanson.com
placermonticello.com
graygreenbiomedservices.com
hvitfeldt.dk
livedeveloper.com
racefietsenblog.nl
druktemakersheerenveen.nl
modamarfil.com
neonodi.be
boyfriendsgoal.site
krishnabrawijaya.com
loysonbryan.com
smartspeak.com
scotlandsroute66.co.uk
mediahub.co.nz
drbrianhweeks.com
billigeflybilletter.dk
fanuli.com.au
chinowarehousespace.com
sachainchiuk.com
plbinsurance.com
wasnederland.nl
acibademmobil.com.tr
bcmets.info
humanviruses.org
donau-guides.eu
piestar.com
pubcon.com
universelle.fr
eventosvirtualesexitosos.com
pixelhealth.net
lashandbrowenvy.com
quitescorting.com
hom-frisor.dk
jaaphoekzema.nl
hnkns.com
ronaldhendriks.nl
ultimatelifesource.com
magrinya.net
prodentalblue.com
malzomattalar.com
protoplay.ca
levelseven.be
marcandy.com
julielusktherapy.com
mrmac.com
cap29010.it
signededenroth.dk
charlottelhanna.com
cl0nazepamblog.com
mangimirossana.it
ilveshistoria.com
pinkxgayvideoawards.com
brisbaneosteopathic.com.au
nuohous.com
devplus.be
advancedeyecare.com
skinkeeper.li
nexstagefinancial.com
hypogenforensic.com
die-immo-agentur.de
haus-landliebe.de
cincinnatiphotocompany.org
jlwilsonbooks.com
kdbrh.com
ninjaki.com
nutriwell.com.sg
karmeliterviertel.com
kristianboennelykke.dk
avisioninthedesert.com
malevannye.ru
dcc-eu.com
satoblog.org
elex.is
lsngroupe.com
auberives-sur-vareze.fr
stanleyqualitysystems.com
gta-jjb.fr
enews-qca.com
annenymus.com
diverfiestas.com.es
jglconsultancy.com
palmecophilippines.com
simpleitsolutions.ch
monstarrsoccer.com
photographycreativity.co.uk
adterium.com
nykfdyrehospital.dk
aktivfriskcenter.se
cac2040.com
gratiocafeblog.wordpress.com
kartuindonesia.com
pokemonturkiye.com
c-sprop.com
cssp-mediation.org
burg-zelem.de
fsbforsale.com
morgansconsult.com
albcleaner.fr
hawthornsretirement.co.uk
hoteltantra.com
9nar.com
antesacademy.it
tellthebell.website
dinecorp.com
datatri.be
oncarrot.com
onlinemarketingsurgery.co.uk
5pointpt.com
greenrider.nl
pourlabretagne.bzh
hawaiisteelbuilding.com
auto-opel.ro
rokthetalk.com
frimec-international.es
smartercashsystem.com
renderbox.ch
specialtyhomeservicesllc.com
olry-cloisons.fr
tramadolhealth.com
internestdigital.com
parisschool.ru
johnstonmingmanning.com
awag-blog.de
kosten-vochtbestrijding.be
outstandingminialbums.com
ygallerysalonsoho.com:443
frameshift.it
cainlaw-okc.com
craftron.com
carolynfriedlander.com
mondolandscapes.com
duthler.nl
diakonie-weitramsdorf-sesslach.de
richardiv.com
yvesdoin-aquarelles.fr
pajagus.fr
g2mediainc.com
betterce.com
crestgood.com
nepal-pictures.com
limounie.com
arabianmice.com
mariannelemenestrel.com
bonitabeachassociation.com
activeterroristwarningcompany.com
drnelsonpediatrics.com
johnsonweekly.com
hensleymarketing.com
fazagostar.co
qandmmusiccenter.com
creohn.de
lovcase.com
denhaagfoodie.nl
sweetz.fr
look.academy
almamidwifery.com
letterscan.de
berdonllp.com
the5thquestion.com
metcalfe.ca
production-stills.co.uk
angeleyezstripclub.com
premiumweb.com.ua:443
prometeyagro.com.ua
belinda.af
haard-totaal.nl
juergenblaetz.de
netadultere.fr
spectamarketingdigital.com.br
kerstliedjeszingen.nl
georgemuncey.com
magnetvisual.com
achetrabalhos.com
poems-for-the-soul.ch
alene.co
lunoluno.com
banksrl.co.za
entdoctor-durban.com
michaelfiegel.com
masecologicos.com
coachpreneuracademy.com
ufovidmag.com
narca.net
paradigmlandscape.com
apogeeconseils.fr
bellesiniacademy.org
mariamalmahdi.com
pays-saint-flour.fr
newonestop.com
hameghlim.com
lexced.com
scietech.academy
switch-made.com
aceroprime.com
theboardroomafrica.com
kiraribeaute-nani.com
ingresosextras.online
avtoboss163.ru:443
alisodentalcare.com
zwemofficial.nl
scentedlair.com
line-x.co.uk
premier-iowa.com
carsten.sparen-it.de
spirello.nl
tchernia-conseil.fr
vitoriaecoturismo.com.br
buonabitare.com
vitormmcosta.com
angelika-schwarz.com
heimdalbygg.no
livelai.com
legundschiess.de
ox-home.com
wirmuessenreden.com
holocine.de
mslp.org
explora.nl
drbenveniste.com
metallbau-hartmann.eu
toranjtuition.org
sbit.ag
worldproskitour.com
askstaffing.com
hm-com.com
ramirezprono.com
victorvictoria.com
lookandseen.com
koncept-m.ru
landgoedspica.nl
dentalcircle.com
witraz.pl
marmarabasin.com
ownidentity.com
cleanroomequipment.ie
baita.ac
annida.it
amorbellezaysalud.com
sambaglow.com
memphishealthandwellness.com
parseport.com
rubyaudiology.com
motocrossplace.co.uk
kroophold-sjaelland.dk
barbaramcfadyenjewelry.com
qrs-international.com
brighthillgroup.com
vapiano.fr
gaearoyals.com
apmollerpension.com
kickittickets.com
acb-gruppe.ch
aoyama.ac
lapponiasafaris.com
espaciopolitica.com
skolaprome.eu
chainofhopeeurope.eu
dentourage.com
trevi-vl.ru
teamsegeln.ch
domilivefurniture.com
acumenconsultingcompany.com
floweringsun.org
ideamode.com
linearete.com
jag.me
atma.nl
gosouldeep.com
the3-week-diet.net
topvijesti.net
dibli.store
vvego.com
buzzneakers.com
taulunkartano.fi
nbva.co.uk
texanscan.org
corporacionrr.com
xtensifi.com
biodentify.ai
stressreliefadvice.com
jmmartinezilustrador.com
centuryvisionglobal.com
alattekniksipil.com
ced-elec.com
andreaskildegaard.dk
renehartman.nl
collegetennis.info
projektparkiet.pl
stabilisateur.fr
verbouwingsdouche.nl
t3brothers.com
smartmind.net
ilovefullcircle.com
advance-refle.com
ebible.co
littlesaints.academy
paardcentraal.nl
thehovecounsellingpractice.co.uk
tothebackofthemoon.com
redctei.co
mercadodelrio.com
forextimes.ru
funworx.de
theintellect.edu.pk
bulyginnikitav.000webhostapp.com
customroasts.com
kellengatton.com
clinic-beethovenstrasse-ag.ch
mayprogulka.ru
voice2biz.com
stitch-n-bitch.com
bilius.dk
jeanmonti.com
digitale-elite.de
drvoip.com
maxcube24.com.ua
aidanpublishing.co.uk
n-newmedia.de
mneti.ru
jollity.hu
gatlinburgcottage.com
bluetenreich-brilon.de
metroton.ru
nvisionsigns.com
citiscapes-art.com
liepertgrafikweb.at
dantreranch.com
avis.mantova.it
boomerslivinglively.com
promus.ca
webforsites.com
manzel.tn
astrographic.com
slideevents.be
craftstone.co.nz
der-stempelking.de
3daywebs.com
skidpiping.de
mikegoodfellow.co.uk
paprikapod.com
agriturismocastagneto.it
shrinkingplanet.com
greatofficespaces.net
selected-minds.de
pinthelook.com
alwaysdc.com
happylublog.wordpress.com
mollymccarthydesign.com
ntinasfiloxenia.gr
interlinkone.com
terraflair.de
speakaudible.com
tecleados.com
shortsalemap.com
chorusconsulting.net
phukienbepthanhdat.com
oscommunity.de
blavait.fr
phoenixcrane.com
comoserescritor.com
qwikcoach.com
biblica.com
mac-computer-support-hamburg.de
fixx-repair.com
eyedoctordallas.com
grancanariaregional.com
akwaba-safaris.com
motocrosshideout.com
lyricalduniya.com
ravage-webzine.nl
bubbalucious.com
pro-gamer.pl
imagine-entertainment.com
atelierkomon.com
nationnewsroom.com
k-zubki.ru
gazelle-du-web.com
pisofare.co
devus.de
abulanov.com
tweedekansenloket.nl
soncini.ch
thegetawaycollective.com
wg-heiligenstadt.de
autoteamlast.de
initconf.com
hostaletdelsindians.es
cormanmarketing.com
bmw-i-pure-impulse.com
innervisions-id.com
charlesfrancis.photos
teutoradio.de
wrinstitute.org
thiagoperez.com
bruut.online
bluelakevision.com
afbudsrejserallinclusive.dk
ikzoekgod.be
bertbutter.nl
muni.pe
indiebizadvocates.org
mahikuchen.com
computer-place.de
fann.ru
framemyballs.com
babysitting-hk.helpergo.co
wyreforest.net
evsynthacademy.org
rs-danmark.dk
tieronechic.com
theatre-embellie.fr
oraweb.net
lmmont.sk
rizplakatjaya.com
stage-infirmier.fr
amco.net.au
directique.com
pansionatblago.ru
lgiwines.com
m2graph.fr
hostingbangladesh.net
richardmaybury.co.uk
spacebel.be
sealgrinderpt.com
billyoart.com
sochi-okna23.ru
foerderverein-vatterschule.de
unislaw-narty.pl
scholarquotes.com
-
net
true
-
pid
19
-
prc
tbirdconfig
onenote
sqlbrowser
firefoxconfig
ocautoupds
ocssd
thebat
winword
mspub
dbeng50
steam
sqlwriter
sqlservr
msftesql
encsvc
infopath
mysqld_nt
sqlagent
mydesktopqos
synctime
wordpad
powerpnt
outlook
dbsnmp
isqlplussvc
ocomm
sqbcoreservice
oracle
thunderbird
xfssvccon
excel
mydesktopservice
msaccess
mysqld_opt
mysqld
agntsvc
thebat64
visio
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on you computer has expansion {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
96
-
svc
veeam
backup
sql
mepocs
sophos
svc$
vss
memtas
Extracted
C:\Users\9jc5qld80-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/1757521EA40659C9
http://decryptor.top/1757521EA40659C9
Extracted
C:\Users\7m7n045-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/557D3C3EC7AB7055
http://decryptor.top/557D3C3EC7AB7055
Targets
-
-
Target
d0190f94e6d05104977c53b55dbc2911_JaffaCakes118
-
Size
179KB
-
MD5
d0190f94e6d05104977c53b55dbc2911
-
SHA1
c0ff002b0e26b180a741c3cefff15190df7746cc
-
SHA256
f4e5d7a95681d920dda75fe5dd89be249905e2a7712f9b3b39e19351f5ef5e69
-
SHA512
d4b1cc032f9d8254ac6035c27948147d8c4c5f60be51e632ba26c6e34ada87515b3113b4bd1cec3cedfa1a73c465a1267681ca05356d8f2f08d81c4fef04d868
-
SSDEEP
3072:LNKQ4JTBg0Q8F63VETed7/kBazzFbULpC15RM:LNn4FQS63VE6F/M4qE15
-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Direct Volume Access
1Indicator Removal
2File Deletion
2Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1