General
-
Target
e2708d3c57b562b01da42f9e7549781f_JaffaCakes118
-
Size
165KB
-
Sample
240915-pysh4atflf
-
MD5
e2708d3c57b562b01da42f9e7549781f
-
SHA1
3d82951dbfab5629187b26ecb7388b7a05597f67
-
SHA256
d976a41f366fb1e3a0a5d15878d84e24704949973d9e0ccead9a779dee03ef0f
-
SHA512
c483968f981e64021025bf4f42424df3cfb88a55bd4cb7f2aa904515eccb85e239c3d44812b28d5b617b6b8476dcc3f4258465a211ae6e6725adbf1850234619
-
SSDEEP
3072:eCEq0R0nZ5ys5n4Y9doh7O79siUs/NaxohzDKMlt:lw02sJPi7O93N3FHlt
Behavioral task
behavioral1
Sample
e2708d3c57b562b01da42f9e7549781f_JaffaCakes118.exe
Resource
win11-20240802-en
Malware Config
Extracted
sodinokibi
48
2047
mrkluttz.com
subyard.com
fire-space.com
verbouwingsdouche.nl
cincinnatiphotocompany.org
promus.ca
ygallerysalonsoho.com:443
olry-cloisons.fr
parseport.com
mind2muscle.nl
lesyeuxbleus.net
rishigangoly.com
lifeinbreaths.com
kenmccallum.com
sochi-okna23.ru
ledyoucan.com
littlesaints.academy
from02pro.com
innersurrection.com
azloans.com
haus-landliebe.de
chatberlin.de
the5thquestion.com
mayprogulka.ru
avisioninthedesert.com
autoteamlast.de
jayfurnitureco.com
smartspeak.com
enews-qca.com
keuken-prijs.nl
morgansconsult.com
tastevirginia.com
alattekniksipil.com
designimage.ae
secrets-clubs.co.uk
adaduga.info
the3-week-diet.net
mac-computer-support-hamburg.de
santastoy.store
fluzfluzrewards.com
texanscan.org
eventosvirtualesexitosos.com
bringmehope.org
devus.de
letsstopsmoking.co.uk
masecologicos.com
cl0nazepamblog.com
invela.dk
limounie.com
kartuindonesia.com
smarttourism.academy
terraflair.de
nuohous.com
bohrlochversicherung.info
thestudio.academy
buffdaddyblog.com
walterman.es
annenymus.com
abulanov.com
martha-frets-ceramics.nl
piestar.com
vapiano.fr
smartworkplaza.com
maxcube24.com.ua
sbit.ag
wyreforest.net
omegamarbella.com
mangimirossana.it
alene.co
tothebackofthemoon.com
schroederschoembs.com
futurenetworking.com
11.in.ua
zwemofficial.nl
saboboxtel.uk
whoopingcrane.com
neonodi.be
cp-bap.de
campinglaforetdetesse.com
bychowo.pl
reygroup.pt
bratek-immobilien.de
xtensifi.com
karmeliterviertel.com
handyman-silkeborg.dk
apmollerpension.com
altocontatto.net
funworx.de
radishallgood.com
nexstagefinancial.com
physio-lang.de
billyoart.com
nieuwsindeklas.be
protoplay.ca
dnqa.co.uk
lapponiasafaris.com
log-barn.co.uk
sellthewrightway.com
qrs-international.com
mike.matthies.de
unboxtherapy.site
bluelakevision.com
sveneulberg.de
biodentify.ai
penumbuhrambutkeiskei.com
narca.net
kafkacare.com
hepishopping.com
licensed-public-adjuster.com
agriturismocastagneto.it
livelai.com
edvestors.org
citiscapes-art.com
teethinadaydentalimplants.com
mensemetgesigte.co.za
ox-home.com
nginx.com
poems-for-the-soul.ch
spirello.nl
brannbornfastigheter.se
dogsunlimitedguide.com
scietech.academy
photonag.com
tesisatonarim.com
jobscore.com
uncensoredhentaigif.com
wineandgo.hu
jlwilsonbooks.com
dennisverschuur.com
egpu.fr
jobstomoveamerica.org
elex.is
simpleitsolutions.ch
baikalflot.ru
bundan.com
evsynthacademy.org
goeppinger-teppichreinigung.de
boomerslivinglively.com
purepreprod4.com
stagefxinc.com
andermattswisswatches.ch
bendel-partner.de
husetsanitas.dk
bruut.online
rhino-storage.co.uk
opt4cdi.com
lookandseen.com
valiant-voice.com
sharonalbrightdds.com
welovecustomers.fr
expohomes.com
muni.pe
loparnille.se
distrifresh.com
xn--80abehgab4ak0ddz.xn--p1ai
avis.mantova.it
fsbforsale.com
eos-horlogerie.com
antesacademy.it
deduktia.fi
jobkiwi.com.ng
ziliak.com
projektparkiet.pl
margaretmcshane.com
crestgood.com
pisofare.co
vipcarrental.ae
slotspinner.com
ntinasfiloxenia.gr
gardenpartner.pl
gta-jjb.fr
csaballoons.com
premier-iowa.com
ludoil.it
tatyanakopieva.ru
sololibrerie.it
achetrabalhos.com
endlessrealms.net
galaniuklaw.com
pays-saint-flour.fr
happylublog.wordpress.com
logosindustries.com
the-beauty-guides.com
mondolandscapes.com
domilivefurniture.com
sealgrinderpt.com
molinum.pt
eastgrinsteadwingchun.com
laaisterplakky.nl
perfectgrin.com
innovationgames-brabant.nl
jglconsultancy.com
kamin-somnium.de
hvitfeldt.dk
hoteltantra.com
site.markkit.com.br
campusce.com
nicksrock.com
airserviceunlimited.com
latableacrepes-meaux.fr
alltagsrassismus-entknoten.de
polynine.com
kuriero.pro
imaginekithomes.co.nz
pourlabretagne.bzh
jacquesgarcianoto.com
renderbox.ch
mamajenedesigns.com
girlish.ae
laylavalentine.com
daveystownhouse.com
claudiakilian.de
acumenconsultingcompany.com
lovetzuchia.com
biketruck.de
cmeow.com
gatlinburgcottage.com
justaroundthecornerpetsit.com
donau-guides.eu
drvoip.com
epsondriversforwindows.com
kryddersnapsen.dk
fbmagazine.ru
parisschool.ru
bellesiniacademy.org
block-optic.com
kristianboennelykke.dk
edrickennedymacfoy.com
collegetennis.info
amelielecompte.wordpress.com
makingmillionaires.net
molade.nl
kosten-vochtbestrijding.be
lyricalduniya.com
fanuli.com.au
lumturo.academy
matteoruzzaofficial.com
marmarabasin.com
uci-france.fr
factorywizuk.com
mariajosediazdemera.com
janmorgenstern.com
internalresults.com
ciga-france.fr
patassociation.com
cssp-mediation.org
aoyama.ac
aciscomputers.com
skolaprome.eu
askstaffing.com
pokemonturkiye.com
geoweb.software
m2graph.fr
peppergreenfarmcatering.com.au
tanatek.com
akwaba-safaris.com
circlecitydj.com
fazagostar.co
oththukaruva.com
agencewho-aixenprovence.fr
der-stempelking.de
jollity.hu
mslp.org
xn--ziinoapte-6ld.ro
brinkdoepke.eu
brunoimmobilier.com
skidpiping.de
awag-blog.de
transifer.fr
elitkeramika-shop.com.ua
docarefoundation.org
georgemuncey.com
limmortelyouth.com
singletonfinancial.com
benchbiz.com
thisprettyhair.com
keyboardjournal.com
fta-media.com
k-v-f.de
silkeight.com
levelseven.be
bjornvanvulpen.nl
bayshoreelite.com
rozmata.com
jax-interim-and-projectmanagement.com
hotelturbo.de
turing.academy
tutvracks.com
skyboundnutrition.co.uk
domaine-des-pothiers.com
jlgraphisme.fr
bodet150ans.com
nourella.com
c-sprop.com
ownidentity.com
agenceassemble.fr
ebible.co
pedmanson.com
triplettagaite.fr
mgimalta.com
netadultere.fr
groovedealers.ru
shrinkingplanet.com
artcase.pl
thegrinningmanmusical.com
four-ways.com
explora.nl
watchsale.biz
kickittickets.com
condormobile.fr
greenrider.nl
markseymourphotography.co.uk
livedeveloper.com
strauchs-wanderlust.info
motocrossplace.co.uk
yournextshoes.com
kompresory-opravy.com
activeterroristwarningcompany.com
nbva.co.uk
altitudeboise.com
maryairbnb.wordpress.com
andrealuchesi.it
sber-biznes.com
delegationhub.com
bodymindchallenger.com
sshomme.com
finnergo.eu
muller.nl
forskolinslimeffect.net
test-teleachat.fr
curtsdiscountguns.com
mustangmarketinggroup.com
mediogiro.com.ar
alcye.com
larchwoodmarketing.com
lunoluno.com
jeanmonti.com
alaskaremote.com
myfbateam.com
digitale-elite.de
ninjaki.com
frankgoll.com
basindentistry.com
apiarista.de
bakingismyyoga.com
thegetawaycollective.com
web865.com
annida.it
fann.ru
cymru.futbol
haard-totaal.nl
catchup-mag.com
suonenjoen.fi
goodherbalhealth.com
kerstliedjeszingen.nl
speakaudible.com
apogeeconseils.fr
advancedeyecare.com
mbuildinghomes.com
speiserei-hannover.de
graygreenbiomedservices.com
krishnabrawijaya.com
rs-danmark.dk
perceptdecor.com
indiebizadvocates.org
xn--80addfr4ahr.dp.ua
leloupblanc.gr
epicjapanart.com
2020hindsight.info
corporacionrr.com
charlesfrancis.photos
stressreliefadvice.com
enactusnhlstenden.com
goddardleadership.org
betterce.com
cormanmarketing.com
bridalcave.com
optigas.com
vedsegaard.dk
alwaysdc.com
amyandzac.com
peninggibadan.co.id
dieetuniversiteit.nl
hm-com.com
finsahome.co.uk
johnsonweekly.com
kelsigordon.com
christopherhannan.com
rizplakatjaya.com
ronaldhendriks.nl
leadforensics.com
omnicademy.com
ayudaespiritualtamara.com
avtoboss163.ru:443
oncarrot.com
matthieupetel.fr
lollachiro.com
jandhpest.com
rino-gmbh.com
weddingceremonieswithtim.com
rentsportsequip.com
iexpert99.com
1deals.com
fi-institutionalfunds.com
bourchier.org
mrcar.nl
gratiocafeblog.wordpress.com
burg-zelem.de
line-x.co.uk
almamidwifery.com
smartercashsystem.com
eurethicsport.eu
natturestaurante.com.br
malevannye.ru
bluemarinefoundation.com
allinonecampaign.com
kausette.com
sambaglow.com
satoblog.org
chris-anne.com
mediabolmong.com
zdrowieszczecin.pl
min-virksomhed.dk
pinthelook.com
jalkapuu.net
bonitabeachassociation.com
julielusktherapy.com
studionumerik.fr
cap29010.it
professionetata.com
worldproskitour.com
descargandoprogramas.com
a-zpaperwork.eu
precisetemp.com
trainiumacademy.com
angelika-schwarz.com
magrinya.net
patriotcleaning.net
citydogslife.com
opticahubertruiz.com
cardsandloyalty.com
dr-vita.de
biblica.com
furland.ru
sjtpo.org
palmecophilippines.com
baumfinancialservices.com
amorbellezaysalud.com
chomiksy.net
n-newmedia.de
testitjavertailut.net
kombi-dress.com
hekecrm.com
zinnystar.com
ikadomus.com
direitapernambuco.com
martinipstudios.com
magnetvisual.com
rename.kz
p-ride.live
metallbau-hartmann.eu
yourhappyevents.fr
look.academy
photographycreativity.co.uk
startuplive.org
qandmmusiccenter.com
akcadagofis.com
subquercy.fr
atelierkomon.com
ketomealprep.academy
sprintcoach.com
profibersan.com
ufovidmag.com
linearete.com
yourcosmicbeing.com
dibli.store
greatofficespaces.net
motocrosshideout.com
letterscan.de
forextimes.ru
innervisions-id.com
solidhosting.nl
centuryvisionglobal.com
bubbalucious.com
efficiencyconsulting.es
fotoslubna.com
kellengatton.com
brownswoodblog.com
ykobbqchicken.ca
metcalfe.ca
heuvelland-oaze.nl
hom-frisor.dk
wallflowersandrakes.com
thenalpa.com
grafikstudio-visuell.de
breakluckrecords.com
blavait.fr
aheadloftladders.co.uk
redpebblephotography.com
leansupremegarcinia.net
azerbaycanas.com
linkbuilding.life
gaearoyals.com
frameshift.it
paradigmlandscape.com
hutchstyle.co.uk
rsidesigns.com
werkzeugtrolley.net
belinda.af
hostingbangladesh.net
christianscholz.de
sweetz.fr
tchernia-conseil.fr
5pointpt.com
mikegoodfellow.co.uk
devplus.be
ruggestar.ch
proffteplo.com
napisat-pismo-gubernatoru.ru:443
drbrianhweeks.com
randyabrown.com
luvinsburger.fr
redctei.co
pixelhealth.net
airvapourbarrier.com
oexebusiness.com
rarefoods.ro
bilius.dk
babysitting-hk.helpergo.co
adabible.org
signamedia.de
advance-refle.com
rokthetalk.com
iactechnologies.net
theboardroomafrica.com
etgdogz.de
aidanpublishing.co.uk
cotton-avenue.co.il
universelle.fr
alabamaroofingllc.com
campusescalade.com
cops4causes.org
housesofwa.com
eyedoctordallas.com
mindfuelers.com
casinodepositors.com
diverfiestas.com.es
artvark.nl
kdbrh.com
blucamp.com
pankiss.ru
veggienessa.com
switch-made.com
solutionshosting.co.uk
baita.ac
bg.szczecin.pl
taulunkartano.fi
insane.agency
baptistdistinctives.org
kryptos72.com
birthplacemag.com
legundschiess.de
riffenmattgarage.ch
johnkoen.com
fixx-repair.com
manzel.tn
metroton.ru
mursall.de
khtrx.com
itheroes.dk
nvisionsigns.com
ravage-webzine.nl
fla.se
miscbo.it
onesynergyinternational.com
zealcon.ae
denhaagfoodie.nl
irizar.com
quitescorting.com
rhino-turf.com
ultimatelifesource.com
vitormmcosta.com
teutoradio.de
vvego.com
schulz-moelln.de
carmel-york.com
otpusk.zp.ua
pharmeko-group.com
malzomattalar.com
atma.nl
chinowarehousespace.com
forumsittard.nl
fitnessblenderstory.com
successcolony.com.ng
barbaramcfadyenjewelry.com
adterium.com
greeneyetattoo.com
theater-lueneburg.de
fskhjalmar.se
hostastay.com
pansionatblago.ru
carolynfriedlander.com
pinkxgayvideoawards.com
mneti.ru
saberconcrete.com
lidkopingsnytt.nu
ncjc.ca
webforsites.com
cxcompany.com
auto-opel.ro
cleanroomequipment.ie
dentourage.com
creohn.de
framemyballs.com
glennverschueren.be
saint-malo-developpement.fr
carsten.sparen-it.de
alharsunindo.com
goodboyscustom.com
imagine-entertainment.com
encounter-p.net
nepal-pictures.com
mesajjongeren.nl
animalfood-online.de
cesep2019.com
skooppi.fi
kvetymichalovce.sk
asiaartgallery.jp
unexplored.gr
bertbutter.nl
ced-elec.com
dayenne-styling.nl
elliemaccreative.wordpress.com
amco.net.au
oscommunity.de
belofloripa.be
scotlandsroute66.co.uk
drbenveniste.com
initconf.com
envomask.com
moira-cristescu.com
heimdalbygg.no
mrmac.com
augen-praxisklinik-rostock.de
noda.com.ua
tweedekansenloket.nl
harleystreetspineclinic.com
internestdigital.com
rolleepollee.com
focuskontur.com
jonnyhooley.com
racefietsenblog.nl
stage-infirmier.fr
slideevents.be
operativadigital.com
katherinealy.com
pxsrl.it
eafx.pro
richardkershawwines.co.za
yayasanprimaunggul.org
davedavisphotos.com
angeleyezstripclub.com
plbinsurance.com
springfieldplumbermo.com
aslog.fr
broccolisoep.nl
jimprattmediations.com
foerderverein-vatterschule.de
wasnederland.nl
leatherjees.com
rivermusic.nl
leopoldineroux.com
acornishstudio.co.uk
mercadodelrio.com
jdscenter.com
boyfriendsgoal.site
t3brothers.com
craftstone.co.nz
tradenavigator.ch
boloria.de
vitoriaecoturismo.com.br
billigeflybilletter.dk
jakubrybak.com
buonabitare.com
signededenroth.dk
zaczytana.com
liepertgrafikweb.at
cc-experts.de
hartofurniture.com
scholarquotes.com
paprikapod.com
dreamvoiceclub.org
ilveshistoria.com
holocine.de
tieronechic.com
tzn.nu
thiagoperez.com
lexced.com
liveyourheartout.co
nepressurecleaning.com
trevi-vl.ru
mediahub.co.nz
hawaiisteelbuilding.com
brisbaneosteopathic.com.au
hnkns.com
lovcase.com
toranjtuition.org
voice2biz.com
druktemakersheerenveen.nl
customroasts.com
deziplan.ru
cyberpromote.de
charlottelhanna.com
mindsparkescape.com
salonlamar.nl
5thactors.com
smartmind.net
hensleymarketing.com
auberives-sur-vareze.fr
thesilkroadny.com
klapanvent.ru
qwikcoach.com
renehartman.nl
techybash.com
rapid5kloan.org
floweringsun.org
alisodentalcare.com
imajyuku-sozoku.com
fridakids.com
memphishealthandwellness.com
drnelsonpediatrics.com
agrifarm.dk
tramadolhealth.com
inewsstar.com
glende-pflanzenparadies.de
osn.ro
sunsolutions.es
nauticmarine.dk
profiz.com
paardcentraal.nl
kiraribeaute-nani.com
advanced-removals.co.uk
galatee-couture.com
b3b.ch
ikzoekgod.be
coachpreneuracademy.com
tbalp.co.uk
hospitalitytrainingsolutions.co.uk
jmmartinezilustrador.com
bagaholics.in
queertube.net
datatri.be
louiedager.com
bluetenreich-brilon.de
electricianul.com
ocduiblog.com
bescomedical.de
richardmaybury.co.uk
lgiwines.com
leijstrom.com
soundseeing.net
awaitspain.com
fysiotherapierijnmond.nl
neolaiamedispa.com
guohedd.com
kroophold-sjaelland.dk
craftingalegacy.com
selected-minds.de
prometeyagro.com.ua
rossomattonecase.it
onlinetvgroup.com
outstandingminialbums.com
bavovrienden.nl
myplaywin3.com
stabilisateur.fr
hawthornsretirement.co.uk
frimec-international.es
bcmets.info
factoriareloj.com
3daywebs.com
lashandbrowenvy.com
directique.com
fidelitytitleoregon.com
skyscanner.ro
hiddensee-buhne11.de
newonestop.com
ilovefullcircle.com
affligemsehondenschool.be
metriplica.academy
victorvictoria.com
therapybusinessacademy.com
rvside.com
teamsegeln.ch
parksideseniorliving.net
tetameble.pl
brighthillgroup.com
jefersonalessandro.com
janellrardon.com
bookingwheel.com
wirmuessenreden.com
dinedrinkdetroit.com
hameghlim.com
wordpress.idium.no
easydental.ae
stoneridgemontessori.com
levencovka.ru
naukaip.ru
orchardbrickwork.com
the-cupboard.co.uk
michaelfiegel.com
putzen-reinigen.com
sytzedevries.com
k-zubki.ru
wrinstitute.org
circuit-diagramz.com
shortsalemap.com
latteswithleslie.com
ncn.nl
schlagbohrmaschinetests.com
topvijesti.net
onlinemarketingsurgery.co.uk
clemenfoto.dk
9nar.com
gazelle-du-web.com
concontactodirecto.com
pilotgreen.com
witraz.pl
eksperdanismanlik.com
skinkeeper.li
espaciopolitica.com
ideamode.com
pureelements.nl
pajagus.fr
karelinjames.com
koncept-m.ru
duthler.nl
thehovecounsellingpractice.co.uk
dierenambulancealkmaar.nl
rattanwarehouse.co.uk
tilldeeke.de
lassocrm.com
istantidigitali.com
buerocenter-butzbach-werbemittel.de
schluesseldienste-hannover.de
oraweb.net
hostaletdelsindians.es
agora-collectivites.com
happycatering.de
interlinkone.com
theintellect.edu.pk
alnectus.com
wribrazil.com
luvbec.com
aquacheck.co.za
loysonbryan.com
aberdeenartwalk.org
anchelor.com
die-immo-agentur.de
hypogenforensic.com
denverwynkoopdentist.com
chatterchatterchatter.com
pro-gamer.pl
skoczynski.eu
clinic-beethovenstrasse-ag.ch
hinotruckwreckers.com.au
111firstdelray.com
nevadaruralhousingstudies.org
jag.me
lsngroupe.com
unislaw-narty.pl
rubyaudiology.com
hotjapaneselesbian.com
ingresosextras.online
banukumbak.com
energosbit-rp.ru
ddmgen.com
mazzaropi.com.br
kookooo.com
sppdstats.com
acibademmobil.com.tr
powershell.su
o90.dk
arabianmice.com
mahikuchen.com
oro.ae
nutriwell.com.sg
cascinarosa33.it
gbk-tp1.de
fotoeditores.com
o2o-academy.com
soncini.ch
zumrutkuyutemel.com
berdonllp.com
nxtstg.org
triavlete.com
richardiv.com
aktivfriskcenter.se
spacebel.be
raeoflightmusic.com
palmenhaus-erfurt.de
geitoniatonaggelon.gr
arazi.eus
bulyginnikitav.000webhostapp.com
rentingwell.com
eshop.design
yuanshenghotel.com
midwestschool.org
nationnewsroom.com
trivselsguide.dk
phukienbepthanhdat.com
towelroot.co
palema.gr
business-basic.de
alexwenzel.de
tellthebell.website
specialtyhomeservicesllc.com
astrographic.com
dentalcircle.com
mariannelemenestrel.com
cookinn.nl
dinecorp.com
bd2fly.com
90nguyentuan.com
rtc24.com
fascaonline.com
atrgroup.it
grupoexin10.com
shortysspices.com
dantreranch.com
primemarineengineering.com
landgoedspica.nl
ya-elka.ru
ramirezprono.com
arthakapitalforvaltning.dk
publicompserver.de
topautoinsurers.net
agendatwentytwenty.com
modamarfil.com
globalcompliancenews.com
buzzneakers.com
lmmont.sk
suitesartemis.gr
lisa-poncon.fr
gosouldeep.com
glas-kuck.de
stralsund-ansichten.de
adedesign.com
triplettabordeaux.fr
go.labibini.ch
xn--billigafrgpatroner-stb.se
flossmoordental.com
pazarspor.org.tr
beandrivingschool.com.au
slotenmakerszwijndrecht.nl
spartamovers.com
mundo-pieces-auto.fr
angelsmirrorus.com
bajova.sk
oportowebdesign.com
advesa.com
comoserescritor.com
production-stills.co.uk
gurutechnologies.net
dentallabor-luenen.de
ahgarage.com
stringnosis.academy
nrgvalue.com
relevantonline.eu
traitware.com
lattalvor.com
gsconcretecoatings.com
acb-gruppe.ch
kemtron.fr
stanleyqualitysystems.com
cainlaw-okc.com
sachainchiuk.com
catalyseurdetransformation.com
spectamarketingdigital.com.br
grancanariaregional.com
beauty-traveller.com
mariamalmahdi.com
supercarhire.co.uk
jaaphoekzema.nl
g2mediainc.com
phoenixcrane.com
thepixelfairy.com
zorgboerderijravensbosch.nl
entdoctor-durban.com
monstarrsoccer.com
johnstonmingmanning.com
ceocenters.com
premiumweb.com.ua:443
nalliasmali.net
nykfdyrehospital.dk
cac2040.com
lagschools.ng
cmascd.com
endstarvation.com
so-sage.fr
mieleshopping.it
axisoflove.org:443
janasfokus.com
anleggsregisteret.no
silverbird.dk
sarahspics.co.uk
ijsselbeton.nl
theatre-embellie.fr
eatyoveges.com
pubcon.com
diakonie-weitramsdorf-sesslach.de
chainofhopeeurope.eu
mjk.digital
global-migrate.com
tecleados.com
bumbipdeco.site
bmw-i-pure-impulse.com
parentsandkids.com
utilisacteur.fr
albcleaner.fr
stathmoulis.gr
marcandy.com
iron-mine.ru
mollymccarthydesign.com
awaisghauri.com
pvandambv.nl
sycamoregreenapts.com
reizenmetkinderen.be
prodentalblue.com
craftron.com
liverpoolabudhabi.ae
banksrl.co.za
volta.plus
arearugcleaningnyc.com
wg-heiligenstadt.de
blueridgeheritage.com
michal-s.co.il
animation-pro.co.uk
stitch-n-bitch.com
yvesdoin-aquarelles.fr
afbudsrejserallinclusive.dk
globalskills.pt
juergenblaetz.de
catering.com
placermonticello.com
bcabattoirs.org
ronielyn.com
rechtenplicht.be
golfclublandgoednieuwkerk.nl
breathebettertolivebetter.com
andreaskildegaard.dk
tages-geldvergleich.de
humanviruses.org
computer-place.de
medicalsupportco.com
voetbalhoogeveen.nl
alpesiberie.com
jameswilliamspainting.com
zuerich-umzug.ch
dcc-eu.com
xrresources.com
reputation-medical.online
billscars.net
scentedlair.com
mazift.dk
chorusconsulting.net
gavelmasters.com
colored-shelves.com
wademurray.com
ivancacu.com
vdolg24.online
aceroprime.com
cuadc.org
dmlcpa.com
-
net
false
-
pid
48
-
prc
excel
outlook
powerpnt
dbsnmp
synctime
mydesktopqos
dbeng50
winword
mspub
xfssvccon
wordpa
encsvc
isqlplussvc
msaccess
thunderbird
sql
thebat
tbirdconfig
ocssd
oracle
infopath
steam
visio
ocomm
mydesktopservice
sqbcoreservice
ocautoupds
onenote
firefox
agntsvc
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. CDHFUND. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
2047
-
svc
memtas
sophos
vss
svc$
mepocs
backup
veeam
sql
Extracted
C:\Users\82iq912j-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/172B6E645B562FA8
http://decryptor.top/172B6E645B562FA8
Targets
-
-
Target
e2708d3c57b562b01da42f9e7549781f_JaffaCakes118
-
Size
165KB
-
MD5
e2708d3c57b562b01da42f9e7549781f
-
SHA1
3d82951dbfab5629187b26ecb7388b7a05597f67
-
SHA256
d976a41f366fb1e3a0a5d15878d84e24704949973d9e0ccead9a779dee03ef0f
-
SHA512
c483968f981e64021025bf4f42424df3cfb88a55bd4cb7f2aa904515eccb85e239c3d44812b28d5b617b6b8476dcc3f4258465a211ae6e6725adbf1850234619
-
SSDEEP
3072:eCEq0R0nZ5ys5n4Y9doh7O79siUs/NaxohzDKMlt:lw02sJPi7O93N3FHlt
Score10/10-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-