General
-
Target
d3e026324b81c755f9058d7a42e96c75_JaffaCakes118
-
Size
165KB
-
Sample
240908-jmdb5sthqr
-
MD5
d3e026324b81c755f9058d7a42e96c75
-
SHA1
35d30a689c4b826e43d9255574fa09965c0a6ba7
-
SHA256
f7c922293637486c307b6d1f05da1eb686a330c527981e0b0f079602e9cfd3d3
-
SHA512
e9eb060168da1db8dafac357835ffc2272dc3fdbae31c77d810c188299657c824255cc1f337ac25420c57ebe821a838f4e92e5fdf7778a4a6692e777305b3913
-
SSDEEP
3072:eCEq0R0nZ5ys5n4Y9doh7O79siUs/Na/CUtnBr8rl2a:lw02sJPi7O93NSnBkl
Behavioral task
behavioral1
Sample
d3e026324b81c755f9058d7a42e96c75_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d3e026324b81c755f9058d7a42e96c75_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
sodinokibi
48
2036
arearugcleaningnyc.com
jacquesgarcianoto.com
dogsunlimitedguide.com
gurutechnologies.net
pajagus.fr
belinda.af
bundan.com
go.labibini.ch
professionetata.com
bcabattoirs.org
descargandoprogramas.com
piestar.com
neolaiamedispa.com
bellesiniacademy.org
cotton-avenue.co.il
boloria.de
loysonbryan.com
vedsegaard.dk
encounter-p.net
thestudio.academy
polynine.com
johnstonmingmanning.com
leadforensics.com
heuvelland-oaze.nl
amco.net.au
scietech.academy
astrographic.com
crestgood.com
entdoctor-durban.com
husetsanitas.dk
expohomes.com
molade.nl
guohedd.com
berdonllp.com
lsngroupe.com
eatyoveges.com
aidanpublishing.co.uk
citiscapes-art.com
kemtron.fr
globalskills.pt
k-zubki.ru
framemyballs.com
o90.dk
asiaartgallery.jp
utilisacteur.fr
the-beauty-guides.com
oscommunity.de
yvesdoin-aquarelles.fr
fysiotherapierijnmond.nl
pro-gamer.pl
ntinasfiloxenia.gr
broccolisoep.nl
ya-elka.ru
delegationhub.com
mediogiro.com.ar
liveyourheartout.co
kryddersnapsen.dk
skooppi.fi
csaballoons.com
mundo-pieces-auto.fr
mediahub.co.nz
lunoluno.com
phukienbepthanhdat.com
buonabitare.com
shortysspices.com
log-barn.co.uk
carmel-york.com
kiraribeaute-nani.com
renderbox.ch
eventosvirtualesexitosos.com
dinecorp.com
voetbalhoogeveen.nl
druktemakersheerenveen.nl
latableacrepes-meaux.fr
boyfriendsgoal.site
smarttourism.academy
computer-place.de
switch-made.com
cincinnatiphotocompany.org
molinum.pt
palmenhaus-erfurt.de
mike.matthies.de
gardenpartner.pl
autoteamlast.de
aoyama.ac
rozmata.com
singletonfinancial.com
ijsselbeton.nl
rubyaudiology.com
kickittickets.com
cl0nazepamblog.com
schluesseldienste-hannover.de
racefietsenblog.nl
beandrivingschool.com.au
therapybusinessacademy.com
bertbutter.nl
unislaw-narty.pl
agencewho-aixenprovence.fr
dierenambulancealkmaar.nl
denverwynkoopdentist.com
fascaonline.com
rechtenplicht.be
physio-lang.de
jonnyhooley.com
atrgroup.it
promus.ca
a-zpaperwork.eu
jandhpest.com
anleggsregisteret.no
animalfood-online.de
rolleepollee.com
imaginekithomes.co.nz
zdrowieszczecin.pl
almamidwifery.com
thesilkroadny.com
onlinemarketingsurgery.co.uk
nbva.co.uk
ocduiblog.com
palema.gr
benchbiz.com
ahgarage.com
affligemsehondenschool.be
myplaywin3.com
pays-saint-flour.fr
reizenmetkinderen.be
brighthillgroup.com
johnsonweekly.com
penumbuhrambutkeiskei.com
rivermusic.nl
bavovrienden.nl
prodentalblue.com
cascinarosa33.it
maryairbnb.wordpress.com
ronielyn.com
lmmont.sk
tecleados.com
satoblog.org
pixelhealth.net
rapid5kloan.org
drbenveniste.com
ciga-france.fr
marmarabasin.com
laaisterplakky.nl
nalliasmali.net
floweringsun.org
theater-lueneburg.de
ruggestar.ch
hotelturbo.de
cp-bap.de
jag.me
animation-pro.co.uk
goodboyscustom.com
teutoradio.de
endlessrealms.net
paprikapod.com
radishallgood.com
optigas.com
epsondriversforwindows.com
agenceassemble.fr
metallbau-hartmann.eu
hawaiisteelbuilding.com
buzzneakers.com
leijstrom.com
vitormmcosta.com
agrifarm.dk
pazarspor.org.tr
xn--billigafrgpatroner-stb.se
acornishstudio.co.uk
rarefoods.ro
bajova.sk
malevannye.ru
antesacademy.it
designimage.ae
edrickennedymacfoy.com
noda.com.ua
subyard.com
biblica.com
andrealuchesi.it
pvandambv.nl
harleystreetspineclinic.com
janellrardon.com
test-teleachat.fr
jimprattmediations.com
wasnederland.nl
rtc24.com
nutriwell.com.sg
suitesartemis.gr
fotoslubna.com
condormobile.fr
projektparkiet.pl
sochi-okna23.ru
keyboardjournal.com
skyboundnutrition.co.uk
axisoflove.org:443
pinkxgayvideoawards.com
amorbellezaysalud.com
katherinealy.com
rentingwell.com
c-sprop.com
ramirezprono.com
mieleshopping.it
tweedekansenloket.nl
endstarvation.com
soncini.ch
successcolony.com.ng
alaskaremote.com
theatre-embellie.fr
stralsund-ansichten.de
moira-cristescu.com
kausette.com
rvside.com
legundschiess.de
lattalvor.com
cesep2019.com
casinodepositors.com
die-immo-agentur.de
nicksrock.com
geitoniatonaggelon.gr
agriturismocastagneto.it
kombi-dress.com
thisprettyhair.com
solidhosting.nl
smartmind.net
outstandingminialbums.com
wordpress.idium.no
yournextshoes.com
fsbforsale.com
webforsites.com
ziliak.com
pureelements.nl
happycatering.de
explora.nl
kvetymichalovce.sk
frankgoll.com
miscbo.it
dinedrinkdetroit.com
allinonecampaign.com
corporacionrr.com
scentedlair.com
babysitting-hk.helpergo.co
davedavisphotos.com
uci-france.fr
gaearoyals.com
greeneyetattoo.com
digitale-elite.de
1deals.com
baikalflot.ru
livedeveloper.com
m2graph.fr
putzen-reinigen.com
9nar.com
mangimirossana.it
vvego.com
sharonalbrightdds.com
leopoldineroux.com
premier-iowa.com
charlottelhanna.com
louiedager.com
futurenetworking.com
belofloripa.be
richardkershawwines.co.za
julielusktherapy.com
tastevirginia.com
specialtyhomeservicesllc.com
myfbateam.com
innovationgames-brabant.nl
hostaletdelsindians.es
graygreenbiomedservices.com
etgdogz.de
nginx.com
concontactodirecto.com
soundseeing.net
fixx-repair.com
from02pro.com
agendatwentytwenty.com
bychowo.pl
imagine-entertainment.com
augen-praxisklinik-rostock.de
irizar.com
mrmac.com
fluzfluzrewards.com
line-x.co.uk
smartercashsystem.com
logosindustries.com
silkeight.com
muni.pe
artvark.nl
tages-geldvergleich.de
bourchier.org
queertube.net
four-ways.com
lassocrm.com
profibersan.com
charlesfrancis.photos
bonitabeachassociation.com
strauchs-wanderlust.info
fi-institutionalfunds.com
afbudsrejserallinclusive.dk
metcalfe.ca
secrets-clubs.co.uk
curtsdiscountguns.com
indiebizadvocates.org
loparnille.se
testitjavertailut.net
campusescalade.com
ultimatelifesource.com
galaniuklaw.com
stressreliefadvice.com
khtrx.com
universelle.fr
watchsale.biz
operativadigital.com
factorywizuk.com
martinipstudios.com
purepreprod4.com
happylublog.wordpress.com
kafkacare.com
airserviceunlimited.com
bruut.online
mbuildinghomes.com
rentsportsequip.com
selected-minds.de
jameswilliamspainting.com
forextimes.ru
atma.nl
levelseven.be
donau-guides.eu
heimdalbygg.no
gatlinburgcottage.com
parksideseniorliving.net
craftingalegacy.com
koncept-m.ru
cymru.futbol
ncjc.ca
towelroot.co
angelika-schwarz.com
alene.co
factoriareloj.com
linearete.com
auberives-sur-vareze.fr
mrcar.nl
scholarquotes.com
mercadodelrio.com
hospitalitytrainingsolutions.co.uk
jglconsultancy.com
midwestschool.org
onlinetvgroup.com
alpesiberie.com
buffdaddyblog.com
lapponiasafaris.com
dennisverschuur.com
unboxtherapy.site
datatri.be
adabible.org
efficiencyconsulting.es
mariajosediazdemera.com
askstaffing.com
90nguyentuan.com
worldproskitour.com
fotoeditores.com
advancedeyecare.com
landgoedspica.nl
pinthelook.com
der-stempelking.de
handyman-silkeborg.dk
kenmccallum.com
leloupblanc.gr
wg-heiligenstadt.de
brisbaneosteopathic.com.au
maxcube24.com.ua
skinkeeper.li
christianscholz.de
the5thquestion.com
glas-kuck.de
pedmanson.com
clinic-beethovenstrasse-ag.ch
janmorgenstern.com
avisioninthedesert.com
goddardleadership.org
oncarrot.com
nevadaruralhousingstudies.org
tatyanakopieva.ru
birthplacemag.com
stanleyqualitysystems.com
haard-totaal.nl
protoplay.ca
coachpreneuracademy.com
bringmehope.org
blueridgeheritage.com
premiumweb.com.ua:443
stagefxinc.com
lidkopingsnytt.nu
dcc-eu.com
campinglaforetdetesse.com
spirello.nl
internestdigital.com
tetameble.pl
kerstliedjeszingen.nl
hiddensee-buhne11.de
lollachiro.com
mondolandscapes.com
craftron.com
gavelmasters.com
forumsittard.nl
sshomme.com
banukumbak.com
richardiv.com
brannbornfastigheter.se
o2o-academy.com
mediabolmong.com
rename.kz
gratiocafeblog.wordpress.com
brinkdoepke.eu
akwaba-safaris.com
amelielecompte.wordpress.com
nuohous.com
hawthornsretirement.co.uk
omegamarbella.com
saint-malo-developpement.fr
cmascd.com
rattanwarehouse.co.uk
jlwilsonbooks.com
ykobbqchicken.ca
fanuli.com.au
paardcentraal.nl
tothebackofthemoon.com
solutionshosting.co.uk
stitch-n-bitch.com
grancanariaregional.com
kdbrh.com
spartamovers.com
rsidesigns.com
xn--80addfr4ahr.dp.ua
bodet150ans.com
inewsstar.com
sarahspics.co.uk
apogeeconseils.fr
easydental.ae
chinowarehousespace.com
greenrider.nl
comoserescritor.com
drbrianhweeks.com
alisodentalcare.com
alcye.com
advance-refle.com
so-sage.fr
greatofficespaces.net
jdscenter.com
jobscore.com
matthieupetel.fr
rossomattonecase.it
skyscanner.ro
kryptos72.com
nationnewsroom.com
eksperdanismanlik.com
b3b.ch
liepertgrafikweb.at
mneti.ru
chris-anne.com
haus-landliebe.de
mgimalta.com
theboardroomafrica.com
silverbird.dk
sunsolutions.es
thiagoperez.com
directique.com
angeleyezstripclub.com
jollity.hu
sycamoregreenapts.com
mensemetgesigte.co.za
richardmaybury.co.uk
wallflowersandrakes.com
wribrazil.com
zealcon.ae
andermattswisswatches.ch
randyabrown.com
basindentistry.com
mesajjongeren.nl
forskolinslimeffect.net
alltagsrassismus-entknoten.de
ncn.nl
palmecophilippines.com
fazagostar.co
achetrabalhos.com
iactechnologies.net
artcase.pl
eos-horlogerie.com
oraweb.net
kamin-somnium.de
pansionatblago.ru
qandmmusiccenter.com
uncensoredhentaigif.com
hypogenforensic.com
sveneulberg.de
chainofhopeeurope.eu
margaretmcshane.com
biketruck.de
bayshoreelite.com
apiarista.de
proffteplo.com
innervisions-id.com
yourcosmicbeing.com
betterce.com
iron-mine.ru
look.academy
lagschools.ng
stage-infirmier.fr
chatterchatterchatter.com
grupoexin10.com
11.in.ua
n-newmedia.de
vdolg24.online
cardsandloyalty.com
mrkluttz.com
cleanroomequipment.ie
ikzoekgod.be
marcandy.com
nauticmarine.dk
ingresosextras.online
topautoinsurers.net
tbalp.co.uk
pxsrl.it
tellthebell.website
theintellect.edu.pk
medicalsupportco.com
springfieldplumbermo.com
redpebblephotography.com
shrinkingplanet.com
qwikcoach.com
airvapourbarrier.com
geoweb.software
orchardbrickwork.com
dentalcircle.com
ledyoucan.com
taulunkartano.fi
daveystownhouse.com
cormanmarketing.com
pubcon.com
dreamvoiceclub.org
oportowebdesign.com
alharsunindo.com
luvinsburger.fr
bendel-partner.de
auto-opel.ro
fitnessblenderstory.com
elex.is
billyoart.com
diakonie-weitramsdorf-sesslach.de
levencovka.ru
patassociation.com
christopherhannan.com
laylavalentine.com
nykfdyrehospital.dk
grafikstudio-visuell.de
justaroundthecornerpetsit.com
thenalpa.com
triavlete.com
ebible.co
5pointpt.com
lumturo.academy
valiant-voice.com
sbit.ag
reputation-medical.online
g2mediainc.com
kuriero.pro
campusce.com
aciscomputers.com
baita.ac
turing.academy
breathebettertolivebetter.com
michal-s.co.il
agora-collectivites.com
avis.mantova.it
dr-vita.de
narca.net
supercarhire.co.uk
modamarfil.com
pharmeko-group.com
signededenroth.dk
t3brothers.com
nieuwsindeklas.be
jobkiwi.com.ng
tutvracks.com
welovecustomers.fr
matteoruzzaofficial.com
memphishealthandwellness.com
morgansconsult.com
jeanmonti.com
jaaphoekzema.nl
acumenconsultingcompany.com
volta.plus
ravage-webzine.nl
envomask.com
boomerslivinglively.com
fann.ru
acb-gruppe.ch
transifer.fr
markseymourphotography.co.uk
sololibrerie.it
lisa-poncon.fr
martha-frets-ceramics.nl
centuryvisionglobal.com
carsten.sparen-it.de
licensed-public-adjuster.com
poems-for-the-soul.ch
jefersonalessandro.com
sppdstats.com
global-migrate.com
acibademmobil.com.tr
scotlandsroute66.co.uk
groovedealers.ru
mazift.dk
alabamaroofingllc.com
zinnystar.com
beauty-traveller.com
speiserei-hannover.de
johnkoen.com
mjk.digital
photonag.com
mollymccarthydesign.com
jmmartinezilustrador.com
collegetennis.info
ilveshistoria.com
ketomealprep.academy
hensleymarketing.com
hom-frisor.dk
magnetvisual.com
cmeow.com
wademurray.com
denhaagfoodie.nl
alexwenzel.de
mac-computer-support-hamburg.de
techybash.com
eastgrinsteadwingchun.com
jlgraphisme.fr
phoenixcrane.com
wineandgo.hu
fire-space.com
cxcompany.com
letterscan.de
kellengatton.com
chomiksy.net
fbmagazine.ru
triplettagaite.fr
bodymindchallenger.com
p-ride.live
awaisghauri.com
eshop.design
skidpiping.de
elliemaccreative.wordpress.com
bluetenreich-brilon.de
ufovidmag.com
eafx.pro
domaine-des-pothiers.com
metriplica.academy
cuadc.org
ownidentity.com
motocrossplace.co.uk
cookinn.nl
deduktia.fi
buerocenter-butzbach-werbemittel.de
zwemofficial.nl
activeterroristwarningcompany.com
kosten-vochtbestrijding.be
skoczynski.eu
altitudeboise.com
housesofwa.com
frimec-international.es
enactusnhlstenden.com
omnicademy.com
nepal-pictures.com
salonlamar.nl
natturestaurante.com.br
dayenne-styling.nl
arthakapitalforvaltning.dk
oexebusiness.com
wirmuessenreden.com
eyedoctordallas.com
ikadomus.com
fskhjalmar.se
zorgboerderijravensbosch.nl
monstarrsoccer.com
photographycreativity.co.uk
rino-gmbh.com
skolaprome.eu
prometeyagro.com.ua
bmw-i-pure-impulse.com
oththukaruva.com
opt4cdi.com
andreaskildegaard.dk
hm-com.com
innersurrection.com
bilius.dk
vipcarrental.ae
sprintcoach.com
mind2muscle.nl
stabilisateur.fr
spectamarketingdigital.com.br
diverfiestas.com.es
sjtpo.org
leansupremegarcinia.net
dmlcpa.com
parentsandkids.com
annida.it
redctei.co
qrs-international.com
annenymus.com
newonestop.com
mustangmarketinggroup.com
2020hindsight.info
muller.nl
carolynfriedlander.com
alnectus.com
internalresults.com
finnergo.eu
plbinsurance.com
sambaglow.com
karelinjames.com
brownswoodblog.com
bumbipdeco.site
glennverschueren.be
k-v-f.de
awaitspain.com
claudiakilian.de
energosbit-rp.ru
chorusconsulting.net
aheadloftladders.co.uk
profiz.com
janasfokus.com
distrifresh.com
rs-danmark.dk
bulyginnikitav.000webhostapp.com
zaczytana.com
nvisionsigns.com
ygallerysalonsoho.com:443
placermonticello.com
electricianul.com
renehartman.nl
dieetuniversiteit.nl
tesisatonarim.com
goeppinger-teppichreinigung.de
ivancacu.com
stoneridgemontessori.com
alattekniksipil.com
hotjapaneselesbian.com
arabianmice.com
juergenblaetz.de
gosouldeep.com
krishnabrawijaya.com
veggienessa.com
devplus.be
relevantonline.eu
nourella.com
luvbec.com
blavait.fr
malzomattalar.com
hutchstyle.co.uk
humanviruses.org
colored-shelves.com
istantidigitali.com
pisofare.co
bubbalucious.com
mursall.de
cainlaw-okc.com
arazi.eus
napisat-pismo-gubernatoru.ru:443
banksrl.co.za
nexstagefinancial.com
angelsmirrorus.com
hameghlim.com
shortsalemap.com
sber-biznes.com
frameshift.it
mindsparkescape.com
stringnosis.academy
lovetzuchia.com
sachainchiuk.com
hinotruckwreckers.com.au
spacebel.be
verbouwingsdouche.nl
initconf.com
suonenjoen.fi
cac2040.com
billscars.net
edvestors.org
focuskontur.com
clemenfoto.dk
tramadolhealth.com
catalyseurdetransformation.com
netadultere.fr
limmortelyouth.com
dantreranch.com
publicompserver.de
adedesign.com
trevi-vl.ru
docarefoundation.org
thehovecounsellingpractice.co.uk
drnelsonpediatrics.com
azerbaycanas.com
funworx.de
abulanov.com
cap29010.it
production-stills.co.uk
espaciopolitica.com
lovcase.com
bakingismyyoga.com
ddmgen.com
riffenmattgarage.ch
customroasts.com
ludoil.it
creohn.de
elitkeramika-shop.com.ua
kartuindonesia.com
kelsigordon.com
baumfinancialservices.com
invela.dk
bcmets.info
signamedia.de
victorvictoria.com
peppergreenfarmcatering.com.au
adterium.com
schulz-moelln.de
sellthewrightway.com
osn.ro
whoopingcrane.com
bohrlochversicherung.info
mslp.org
latteswithleslie.com
circuit-diagramz.com
anchelor.com
topvijesti.net
xn--ziinoapte-6ld.ro
klapanvent.ru
bluelakevision.com
tieronechic.com
pilotgreen.com
furland.ru
kookooo.com
masecologicos.com
mindfuelers.com
cssp-mediation.org
liverpoolabudhabi.ae
jalkapuu.net
the-cupboard.co.uk
werkzeugtrolley.net
otpusk.zp.ua
catering.com
epicjapanart.com
ninjaki.com
drvoip.com
startuplive.org
smartworkplaza.com
mikegoodfellow.co.uk
karmeliterviertel.com
jakubrybak.com
subquercy.fr
holocine.de
limounie.com
burg-zelem.de
globalcompliancenews.com
texanscan.org
bookingwheel.com
thegetawaycollective.com
smartspeak.com
fridakids.com
fla.se
chatberlin.de
tchernia-conseil.fr
goodherbalhealth.com
aktivfriskcenter.se
glende-pflanzenparadies.de
bescomedical.de
rizplakatjaya.com
site.markkit.com.br
pourlabretagne.bzh
aberdeenartwalk.org
alwaysdc.com
rishigangoly.com
cyberpromote.de
olry-cloisons.fr
linkbuilding.life
atelierkomon.com
advanced-removals.co.uk
bagaholics.in
peninggibadan.co.id
flossmoordental.com
egpu.fr
xn--80abehgab4ak0ddz.xn--p1ai
quitescorting.com
rokthetalk.com
nrgvalue.com
letsstopsmoking.co.uk
nepressurecleaning.com
lesyeuxbleus.net
web865.com
tradenavigator.ch
trivselsguide.dk
slotspinner.com
sweetz.fr
aceroprime.com
oro.ae
eurethicsport.eu
barbaramcfadyenjewelry.com
business-basic.de
jayfurnitureco.com
lyricalduniya.com
michaelfiegel.com
domilivefurniture.com
imajyuku-sozoku.com
devus.de
bratek-immobilien.de
schlagbohrmaschinetests.com
blucamp.com
larchwoodmarketing.com
lookandseen.com
galatee-couture.com
dentallabor-luenen.de
3daywebs.com
fta-media.com
hostingbangladesh.net
saboboxtel.uk
cc-experts.de
unexplored.gr
akcadagofis.com
stathmoulis.gr
wyreforest.net
iexpert99.com
azloans.com
ayudaespiritualtamara.com
mazzaropi.com.br
pokemonturkiye.com
enews-qca.com
yuanshenghotel.com
the3-week-diet.net
aslog.fr
billigeflybilletter.dk
neonodi.be
thegrinningmanmusical.com
ideamode.com
vapiano.fr
saberconcrete.com
golfclublandgoednieuwkerk.nl
circlecitydj.com
mariamalmahdi.com
nxtstg.org
weddingceremonieswithtim.com
traitware.com
dentourage.com
schroederschoembs.com
mariannelemenestrel.com
foerderverein-vatterschule.de
albcleaner.fr
perfectgrin.com
ilovefullcircle.com
tzn.nu
vitoriaecoturismo.com.br
advesa.com
toranjtuition.org
bd2fly.com
111firstdelray.com
pankiss.ru
onesynergyinternational.com
fidelitytitleoregon.com
hartofurniture.com
awag-blog.de
bluemarinefoundation.com
hostastay.com
naukaip.ru
witraz.pl
gazelle-du-web.com
adaduga.info
ced-elec.com
speakaudible.com
yayasanprimaunggul.org
tilldeeke.de
bridalcave.com
perceptdecor.com
gsconcretecoatings.com
citydogslife.com
santastoy.store
interlinkone.com
direitapernambuco.com
girlish.ae
zumrutkuyutemel.com
teethinadaydentalimplants.com
gta-jjb.fr
mahikuchen.com
amyandzac.com
sytzedevries.com
parisschool.ru
hepishopping.com
apmollerpension.com
jobstomoveamerica.org
kroophold-sjaelland.dk
evsynthacademy.org
catchup-mag.com
ceocenters.com
rhino-storage.co.uk
lexced.com
trainiumacademy.com
wrinstitute.org
leatherjees.com
ronaldhendriks.nl
craftstone.co.nz
baptistdistinctives.org
slotenmakerszwijndrecht.nl
aquacheck.co.za
lgiwines.com
zuerich-umzug.ch
duthler.nl
xrresources.com
avtoboss163.ru:443
simpleitsolutions.ch
makingmillionaires.net
5thactors.com
precisetemp.com
biodentify.ai
altocontatto.net
triplettabordeaux.fr
parseport.com
walterman.es
lifeinbreaths.com
teamsegeln.ch
brunoimmobilier.com
lashandbrowenvy.com
raeoflightmusic.com
opticahubertruiz.com
bg.szczecin.pl
yourhappyevents.fr
primemarineengineering.com
magrinya.net
paradigmlandscape.com
manzel.tn
jax-interim-and-projectmanagement.com
keuken-prijs.nl
kompresory-opravy.com
cops4causes.org
terraflair.de
hvitfeldt.dk
motocrosshideout.com
hoteltantra.com
mayprogulka.ru
slideevents.be
hnkns.com
min-virksomhed.dk
itheroes.dk
livelai.com
xtensifi.com
insane.agency
dibli.store
thepixelfairy.com
littlesaints.academy
block-optic.com
dnqa.co.uk
finsahome.co.uk
metroton.ru
deziplan.ru
gbk-tp1.de
hekecrm.com
ox-home.com
reygroup.pt
studionumerik.fr
bjornvanvulpen.nl
kristianboennelykke.dk
tanatek.com
breakluckrecords.com
powershell.su
rhino-turf.com
sealgrinderpt.com
mamajenedesigns.com
patriotcleaning.net
georgemuncey.com
voice2biz.com
-
net
false
-
pid
48
-
prc
onenote
infopath
sql
ocssd
visio
ocautoupds
mspub
thebat
isqlplussvc
synctime
outlook
excel
firefox
steam
powerpnt
dbsnmp
mydesktopqos
msaccess
encsvc
agntsvc
winword
tbirdconfig
mydesktopservice
xfssvccon
sqbcoreservice
oracle
wordpa
dbeng50
thunderbird
ocomm
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. CDHFUND. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
2036
-
svc
veeam
sql
memtas
vss
sophos
svc$
mepocs
backup
Extracted
C:\Users\fme92-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/F04BCE0F12281737
http://decryptor.top/F04BCE0F12281737
Extracted
C:\Users\v2264g4-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/A064A2D02E6C7F51
http://decryptor.top/A064A2D02E6C7F51
Targets
-
-
Target
d3e026324b81c755f9058d7a42e96c75_JaffaCakes118
-
Size
165KB
-
MD5
d3e026324b81c755f9058d7a42e96c75
-
SHA1
35d30a689c4b826e43d9255574fa09965c0a6ba7
-
SHA256
f7c922293637486c307b6d1f05da1eb686a330c527981e0b0f079602e9cfd3d3
-
SHA512
e9eb060168da1db8dafac357835ffc2272dc3fdbae31c77d810c188299657c824255cc1f337ac25420c57ebe821a838f4e92e5fdf7778a4a6692e777305b3913
-
SSDEEP
3072:eCEq0R0nZ5ys5n4Y9doh7O79siUs/Na/CUtnBr8rl2a:lw02sJPi7O93NSnBkl
Score10/10-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-