General
-
Target
f399f74045c127d9bab9b10fa2e81ea9_JaffaCakes118
-
Size
166KB
-
Sample
240924-n8qa2sxena
-
MD5
f399f74045c127d9bab9b10fa2e81ea9
-
SHA1
fa73ebc39f144e16da0b823baa594861535d094d
-
SHA256
58ca453b81a5506420ef00a945ad3b3841e4ad7d5ecaf1bb983ac3c3db5ab8c1
-
SHA512
3533726b13aa0f98338896afa74b04f5f5a9b8a585357077916b06c02871585ead103048aee981e5ea9d9fdd1c87c196db445b55e98d1a984b1aeff43bd5c7d1
-
SSDEEP
3072:EJMawtnGqtWoKeZC62aoNUSncCyxFXtuk3F8/A:+w9vteQJYUoczJIA
Static task
static1
Behavioral task
behavioral1
Sample
f399f74045c127d9bab9b10fa2e81ea9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f399f74045c127d9bab9b10fa2e81ea9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
sodinokibi
$2a$10$vhHqn39Fla4EMRtpq8PraeeTm62fwZ0b7u0Ntc9c4ECRw88ob4Uie
3833
instatron.net
dlc.berlin
hexcreatives.co
smogathon.com
nvwoodwerks.com
ungsvenskarna.se
finediningweek.pl
theshungiteexperience.com.au
verytycs.com
theletter.company
abogadosaccidentetraficosevilla.es
ivfminiua.com
andersongilmour.co.uk
denovofoodsgroup.com
vietlawconsultancy.com
airconditioning-waalwijk.nl
toreria.es
backstreetpub.com
memaag.com
greenko.pl
comarenterprises.com
kingfamily.construction
sabel-bf.com
notmissingout.com
danskretursystem.dk
tomaso.gr
mercantedifiori.com
rota-installations.co.uk
edrcreditservices.nl
smalltownideamill.wordpress.com
milltimber.aberdeen.sch.uk
gasbarre.com
extraordinaryoutdoors.com
waynela.com
montrium.com
coding-machine.com
edgewoodestates.org
perbudget.com
oncarrot.com
evologic-technologies.com
blewback.com
labobit.it
thewellnessmimi.com
maureenbreezedancetheater.org
galserwis.pl
mrxermon.de
bimnapratica.com
craftleathermnl.com
groupe-cets.com
modestmanagement.com
financescorecard.com
fatfreezingmachines.com
leoben.at
bigler-hrconsulting.ch
baustb.de
shiftinspiration.com
the-domain-trader.com
worldhealthbasicinfo.com
autopfand24.de
hashkasolutindo.com
trapiantofue.it
levihotelspa.fi
xn--singlebrsen-vergleich-nec.com
mousepad-direkt.de
pocket-opera.de
vitalyscenter.es
artallnightdc.com
zso-mannheim.de
markelbroch.com
ctrler.cn
completeweddingkansas.com
ostheimer.at
mrsfieldskc.com
sportverein-tambach.de
nurturingwisdom.com
huesges-gruppe.de
firstpaymentservices.com
tongdaifpthaiphong.net
greenpark.ch
schmalhorst.de
steampluscarpetandfloors.com
mirjamholleman.nl
takeflat.com
izzi360.com
spinheal.ru
ora-it.de
dr-pipi.de
triactis.com
igorbarbosa.com
shadebarandgrillorlando.com
gporf.fr
desert-trails.com
lorenacarnero.com
nakupunafoundation.org
ki-lowroermond.nl
gopackapp.com
drugdevice.org
heurigen-bauer.at
campus2day.de
suncrestcabinets.ca
anteniti.com
thomasvicino.com
falcou.fr
darrenkeslerministries.com
milanonotai.it
body-armour.online
pridoxmaterieel.nl
kamienny-dywan24.pl
smartypractice.com
evergreen-fishing.com
spectrmash.ru
promalaga.es
cuspdental.com
koken-voor-baby.nl
muamuadolls.com
eco-southafrica.com
dublikator.com
synlab.lt
catholicmusicfest.com
copystar.co.uk
tanzprojekt.com
botanicinnovations.com
piajeppesen.dk
all-turtles.com
lbcframingelectrical.com
proudground.org
ilcdover.com
tecnojobsnet.com
sobreholanda.com
christ-michael.net
micahkoleoso.de
kirkepartner.dk
testcoreprohealthuk.com
homng.net
qualitaetstag.de
herbayupro.com
cactusthebrand.com
stingraybeach.com
alhashem.net
mdacares.com
myzk.site
mir-na-iznanku.com
kafu.ch
mediaplayertest.net
woodworkersolution.com
gaiam.nl
iwelt.de
importardechina.info
revezlimage.com
imaginado.de
resortmtn.com
agence-referencement-naturel-geneve.net
hotelzentral.at
navyfederalautooverseas.com
advizewealth.com
faizanullah.com
henricekupper.com
campusoutreach.org
mrsplans.net
havecamerawilltravel2017.wordpress.com
degroenetunnel.com
asgestion.com
kisplanning.com.au
daklesa.de
yousay.site
neuschelectrical.co.za
starsarecircular.org
vyhino-zhulebino-24.ru
geoffreymeuli.com
baptisttabernacle.com
blogdecachorros.com
julis-lsa.de
mardenherefordshire-pc.gov.uk
musictreehouse.net
eglectonk.online
symphonyenvironmental.com
bsaship.com
aakritpatel.com
anybookreader.de
turkcaparbariatrics.com
lmtprovisions.com
bxdf.info
tradiematepro.com.au
fundaciongregal.org
gadgetedges.com
iyahayki.nl
oemands.dk
darnallwellbeing.org.uk
vancouver-print.ca
asiluxury.com
charlottepoudroux-photographie.fr
shiresresidential.com
johnsonfamilyfarmblog.wordpress.com
ikads.org
webhostingsrbija.rs
oldschoolfun.net
dutchbrewingcoffee.com
vibehouse.rw
tandartspraktijkheesch.nl
klusbeter.nl
baumkuchenexpo.jp
rebeccarisher.com
microcirc.net
thedresserie.com
sporthamper.com
edv-live.de
heliomotion.com
lightair.com
globedivers.wordpress.com
lange.host
jobmap.at
almosthomedogrescue.dog
hugoversichert.de
csgospeltips.se
renergysolution.com
craigvalentineacademy.com
365questions.org
judithjansen.com
team-montage.dk
mapawood.com
gastsicht.de
webmaster-peloton.com
ilso.net
onlybacklink.com
tampaallen.com
hotelsolbh.com.br
bafuncs.org
centrospgolega.com
abuelos.com
ecopro-kanto.com
groupe-frayssinet.fr
work2live.de
35-40konkatsu.net
itelagen.com
alsace-first.com
kikedeoliveira.com
foretprivee.ca
porno-gringo.com
carrybrands.nl
limassoldriving.com
frontierweldingllc.com
littlebird.salon
juneauopioidworkgroup.org
ampisolabergeggi.it
xtptrack.com
makeitcount.at
sahalstore.com
sevenadvertising.com
nachhilfe-unterricht.com
lecantou-coworking.com
div-vertriebsforschung.de
philippedebroca.com
acomprarseguidores.com
solerluethi-allart.ch
spsshomeworkhelp.com
simulatebrain.com
ecpmedia.vn
slwgs.org
gratispresent.se
solhaug.tk
sachnendoc.com
birnam-wood.com
bargningharnosand.se
lucidinvestbank.com
bigbaguettes.eu
hardinggroup.com
cite4me.org
tastewilliamsburg.com
milestoneshows.com
aodaichandung.com
pay4essays.net
punchbaby.com
sojamindbody.com
biapi-coaching.fr
torgbodenbollnas.se
hiddencitysecrets.com.au
ruralarcoiris.com
stemenstilte.nl
stemplusacademy.com
kuntokeskusrok.fi
woodleyacademy.org
brevitempore.net
villa-marrakesch.de
urclan.net
securityfmm.com
art2gointerieurprojecten.nl
truenyc.co
dsl-ip.de
basisschooldezonnewijzer.nl
promesapuertorico.com
quickyfunds.com
aselbermachen.com
ilive.lt
first-2-aid-u.com
rerekatu.com
the-virtualizer.com
stoneys.ch
entopic.com
n1-headache.com
operaslovakia.sk
talentwunder.com
monark.com
xn--rumung-bua.online
fensterbau-ziegler.de
beyondmarcomdotcom.wordpress.com
gamesboard.info
herbstfeststaefa.ch
psc.de
corona-handles.com
bestbet.com
fitnessbazaar.com
joseconstela.com
bauertree.com
caribbeansunpoker.com
cheminpsy.fr
bristolaeroclub.co.uk
alfa-stroy72.com
balticdermatology.lt
ventti.com.ar
adoptioperheet.fi
offroadbeasts.com
better.town
expandet.dk
nancy-informatique.fr
iwr.nl
tandartspraktijkhartjegroningen.nl
apolomarcas.com
atmos-show.com
precisionbevel.com
modamilyon.com
ino-professional.ru
houseofplus.com
modelmaking.nl
girlillamarketing.com
crediacces.com
cwsitservices.co.uk
jenniferandersonwriter.com
stormwall.se
nokesvilledentistry.com
employeesurveys.com
braffinjurylawfirm.com
bodyfulls.com
zervicethai.co.th
lynsayshepherd.co.uk
calabasasdigest.com
cimanchesterescorts.co.uk
durganews.com
paulisdogshop.de
easytrans.com.au
bunburyfreightservices.com.au
hellohope.com
mrtour.site
westdeptfordbuyrite.com
fizzl.ru
danholzmann.com
ohidesign.com
iviaggisonciliegie.it
danubecloud.com
profectis.de
pickanose.com
liikelataamo.fi
tanciu.com
presseclub-magdeburg.de
ledmes.ru
boosthybrid.com.au
kaotikkustomz.com
destinationclients.fr
ogdenvision.com
artotelamsterdam.com
architecturalfiberglass.org
rhinosfootballacademy.com
ai-spt.jp
wacochamber.com
xn--logopdie-leverkusen-kwb.de
luckypatcher-apkz.com
mepavex.nl
rostoncastings.co.uk
blossombeyond50.com
pawsuppetlovers.com
michaelsmeriglioracing.com
lionware.de
twohourswithlena.wordpress.com
citymax-cr.com
bricotienda.com
hkr-reise.de
planchaavapor.net
grupocarvalhoerodrigues.com.br
tstaffing.nl
bowengroup.com.au
hvccfloorcare.com
knowledgemuseumbd.com
gymnasedumanagement.com
hairnetty.wordpress.com
nosuchthingasgovernment.com
educar.org
nijaplay.com
licor43.de
richard-felix.co.uk
cyntox.com
bptdmaluku.com
maineemploymentlawyerblog.com
nativeformulas.com
journeybacktolife.com
carriagehousesalonvt.com
zewatchers.com
simpkinsedwards.co.uk
justinvieira.com
lapinlviasennus.fi
ahouseforlease.com
pcp-nc.com
austinlchurch.com
2ekeus.nl
dr-seleznev.com
crowd-patch.co.uk
newyou.at
penco.ie
walkingdeadnj.com
embracinghiscall.com
ausair.com.au
sandd.nl
theapifactory.com
chandlerpd.com
body-guards.it
hatech.io
huissier-creteil.com
caribdoctor.org
projetlyonturin.fr
leather-factory.co.jp
songunceliptv.com
ateliergamila.com
waveneyrivercentre.co.uk
quemargrasa.net
osterberg.fi
brandl-blumen.de
polzine.net
blog.solutionsarchitect.guru
id-vet.com
harpershologram.wordpress.com
tuuliautio.fi
pferdebiester.de
actecfoundation.org
devok.info
shonacox.com
siliconbeach-realestate.com
deltacleta.cat
opatrovanie-ako.sk
brigitte-erler.com
greenfieldoptimaldentalcare.com
lichencafe.com
hoteledenpadova.it
sofavietxinh.com
compliancesolutionsstrategies.com
ftf.or.at
harveybp.com
nmiec.com
schutting-info.nl
jakekozmor.com
summitmarketingstrategies.com
lapmangfpt.info.vn
kosterra.com
vannesteconstruct.be
testzandbakmetmening.online
helikoptervluchtnewyork.nl
smhydro.com.pl
nhadatcanho247.com
maryloutaylor.com
gasolspecialisten.se
pt-arnold.de
imadarchid.com
gonzalezfornes.es
readberserk.com
courteney-cox.net
kariokids.com
craigmccabe.fun
geekwork.pl
kao.at
aminaboutique247.com
stupbratt.no
centuryrs.com
kojinsaisei.info
plotlinecreative.com
hokagestore.com
innote.fi
leda-ukraine.com.ua
unetica.fr
moveonnews.com
esope-formation.fr
beautychance.se
galleryartfair.com
alysonhoward.com
joyeriaorindia.com
spylista.com
lusak.at
lykkeliv.net
wolf-glas-und-kunst.de
werkkring.nl
spd-ehningen.de
pv-design.de
syndikat-asphaltfieber.de
mindpackstudios.com
kalkulator-oszczednosci.pl
mmgdouai.fr
pixelarttees.com
seminoc.com
abitur-undwieweiter.de
cranleighscoutgroup.org
igfap.com
rksbusiness.com
dw-css.de
jerling.de
crosspointefellowship.church
kevinjodea.com
mezhdu-delom.ru
dubnew.com
xn--vrftet-pua.biz
blood-sports.net
puertamatic.es
mbxvii.com
amerikansktgodis.se
farhaani.com
selfoutlet.com
manutouchmassage.com
jeanlouissibomana.com
xoabigail.com
paradicepacks.com
uimaan.fi
xlarge.at
d1franchise.com
mediaclan.info
jyzdesign.com
xn--fnsterputssollentuna-39b.se
jadwalbolanet.info
strandcampingdoonbeg.com
bookspeopleplaces.com
bbsmobler.se
nataschawessels.com
jvanvlietdichter.nl
ftlc.es
ccpbroadband.com
praxis-management-plus.de
dushka.ua
autodujos.lt
bierensgebakkramen.nl
epwritescom.wordpress.com
pinkexcel.com
associacioesportivapolitg.cat
ouryoungminds.wordpress.com
rehabilitationcentersinhouston.net
higadograsoweb.com
sauschneider.info
haar-spange.com
antiaginghealthbenefits.com
olejack.ru
zflas.com
tonelektro.nl
miriamgrimm.de
physiofischer.de
hrabritelefon.hr
trystana.com
ncuccr.org
marathonerpaolo.com
mank.de
alten-mebel63.ru
run4study.com
gw2guilds.org
ianaswanson.com
dnepr-beskid.com.ua
rafaut.com
new.devon.gov.uk
xltyu.com
cursoporcelanatoliquido.online
aco-media.nl
bundabergeyeclinic.com.au
noixdecocom.fr
bordercollie-nim.nl
samnewbyjax.com
fitovitaforum.com
live-con-arte.de
sanaia.com
cursosgratuitosnainternet.com
midmohandyman.com
marchand-sloboda.com
mbfagency.com
tarotdeseidel.com
wari.com.pe
facettenreich27.de
systemate.dk
coding-marking.com
streamerzradio1.site
boulderwelt-muenchen-west.de
fax-payday-loans.com
satyayoga.de
1team.es
forskolorna.org
poultrypartners.nl
southeasternacademyofprosthodontics.org
victoriousfestival.co.uk
aarvorg.com
arteservicefabbro.com
datacenters-in-europe.com
shhealthlaw.com
romeguidedvisit.com
no-plans.com
slimani.net
tigsltd.com
kampotpepper.gives
ausbeverage.com.au
stopilhan.com
sterlingessay.com
slashdb.com
nandistribution.nl
coffreo.biz
leeuwardenstudentcity.nl
mylovelybluesky.com
cirugiauretra.es
heidelbergartstudio.gallery
uranus.nl
advokathuset.dk
pmc-services.de
corola.es
miraclediet.fun
vermoote.de
thefixhut.com
adultgamezone.com
wurmpower.at
schraven.de
socstrp.org
bridgeloanslenders.com
tanzschule-kieber.de
sarbatkhalsafoundation.org
fairfriends18.de
analiticapublica.es
nuzech.com
winrace.no
allfortheloveofyou.com
longislandelderlaw.com
pubweb.carnet.hr
toponlinecasinosuk.co.uk
panelsandwichmadrid.es
spargel-kochen.de
rushhourappliances.com
funjose.org.gt
lapinvihreat.fi
lascuola.nl
plv.media
croftprecision.co.uk
12starhd.online
wasmachtmeinfonds.at
pomodori-pizzeria.de
conexa4papers.trade
delchacay.com.ar
tennisclubetten.nl
denifl-consulting.at
wien-mitte.co.at
webcodingstudio.com
fibrofolliculoma.info
architekturbuero-wagner.net
schoellhammer.com
newstap.com.ng
malychanieruchomoscipremium.com
bastutunnan.se
wsoil.com.sg
shsthepapercut.com
thedad.com
strategicstatements.com
mountaintoptinyhomes.com
argenblogs.com.ar
cityorchardhtx.com
baylegacy.com
berliner-versicherungsvergleich.de
daniel-akermann-architektur-und-planung.ch
kaliber.co.jp
ziegler-praezisionsteile.de
homecomingstudio.com
schoolofpassivewealth.com
solinegraphic.com
kojima-shihou.com
i-trust.dk
lukeshepley.wordpress.com
withahmed.com
pasivect.co.uk
ontrailsandboulevards.com
wychowanieprzedszkolne.pl
atalent.fi
serce.info.pl
vorotauu.ru
allentownpapershow.com
humanityplus.org
myhostcloud.com
softsproductkey.com
marcuswhitten.site
parkcf.nl
besttechie.com
haremnick.com
deko4you.at
bhwlawfirm.com
personalenhancementcenter.com
manijaipur.com
chatizel-paysage.fr
wraithco.com
deschl.net
4net.guru
hushavefritid.dk
kunze-immobilien.de
appsformacpc.com
qlog.de
boisehosting.net
notsilentmd.org
dekkinngay.com
smejump.co.th
parkstreetauto.net
em-gmbh.ch
broseller.com
makeflowers.ru
teczowadolina.bytom.pl
rieed.de
prochain-voyage.net
jolly-events.com
ymca-cw.org.uk
carlosja.com
elimchan.com
gemeentehetkompas.nl
mooshine.com
lenreactiv-shop.ru
castillobalduz.es
skiltogprint.no
echtveilig.nl
sloverse.com
bouldercafe-wuppertal.de
radaradvies.nl
dr-tremel-rednitzhembach.de
ladelirante.fr
despedidascostablanca.es
evangelische-pfarrgemeinde-tuniberg.de
seevilla-dr-sturm.at
candyhouseusa.com
real-estate-experts.com
antonmack.de
theclubms.com
platformier.com
101gowrie.com
tux-espacios.com
retroearthstudio.com
siluet-decor.ru
linnankellari.fi
jasonbaileystudio.com
forestlakeuca.org.au
connectedace.com
mymoneyforex.com
blacksirius.de
www1.proresult.no
jusibe.com
todocaracoles.com
trackyourconstruction.com
sw1m.ru
pmcimpact.com
idemblogs.com
tsklogistik.eu
artige.com
asteriag.com
handi-jack-llc.com
lebellevue.fr
commercialboatbuilding.com
charlesreger.com
consultaractadenacimiento.com
oceanastudios.com
enovos.de
cortec-neuro.com
whittier5k.com
kamahouse.net
dubscollective.com
international-sound-awards.com
teresianmedia.org
intecwi.com
upplandsspar.se
binder-buerotechnik.at
dutchcoder.nl
marietteaernoudts.nl
kedak.de
fayrecreations.com
parks-nuernberg.de
teknoz.net
saxtec.com
huehnerauge-entfernen.de
corendonhotels.com
launchhubl.com
tetinfo.in
live-your-life.jp
devstyle.org
walter-lemm.de
familypark40.com
autodemontagenijmegen.nl
saarland-thermen-resort.com
executiveairllc.com
zimmerei-fl.de
digivod.de
kindersitze-vergleich.de
carolinepenn.com
jsfg.com
urmasiimariiuniri.ro
wellplast.se
remcakram.com
y-archive.com
effortlesspromo.com
argos.wityu.fund
sexandfessenjoon.wordpress.com
nicoleaeschbachorg.wordpress.com
sweering.fr
mikeramirezcpa.com
lefumetdesdombes.com
sportiomsportfondsen.nl
zweerscreatives.nl
c2e-poitiers.com
pier40forall.org
ncid.bc.ca
ravensnesthomegoods.com
ecoledansemulhouse.fr
aniblinova.wordpress.com
lachofikschiet.nl
hairstylesnow.site
finde-deine-marke.de
makeurvoiceheard.com
kidbucketlist.com.au
peterstrobos.com
baronloan.org
norpol-yachting.com
refluxreducer.com
irishmachineryauctions.com
DupontSellsHomes.com
pogypneu.sk
kaminscy.com
buymedical.biz
augenta.com
vloeren-nu.nl
digi-talents.com
tinyagency.com
imperfectstore.com
123vrachi.ru
psnacademy.in
devlaur.com
kmbshipping.co.uk
creamery201.com
filmvideoweb.com
schlafsack-test.net
simplyblessedbykeepingitreal.com
insidegarage.pl
stacyloeb.com
spacecitysisters.org
krcove-zily.eu
garage-lecompte-rouen.fr
jacquin-maquettes.com
mooreslawngarden.com
naturalrapids.com
oslomf.no
highlinesouthasc.com
logopaedie-blomberg.de
dpo-as-a-service.com
apprendrelaudit.com
drfoyle.com
stoeberstuuv.de
caffeinternet.it
eadsmurraypugh.com
chefdays.de
dezatec.es
urist-bogatyr.ru
kadesignandbuild.co.uk
balticdentists.com
foryourhealth.live
loprus.pl
thomas-hospital.de
chavesdoareeiro.com
id-et-d.fr
plantag.de
atozdistribution.co.uk
parking.netgateway.eu
macabaneaupaysflechois.com
oneheartwarriors.at
drnice.de
mariposapropaneaz.com
theadventureedge.com
blgr.be
smessier.com
interactcenter.org
ihr-news.jp
boompinoy.com
freie-gewerkschaften.de
gmto.fr
mylolis.com
dareckleyministries.com
directwindowco.com
biortaggivaldelsa.com
kenhnoithatgo.com
vdberg-autoimport.nl
cleliaekiko.online
people-biz.com
purposeadvisorsolutions.com
seagatesthreecharters.com
slupetzky.at
iqbalscientific.com
hypozentrum.com
mastertechengineering.com
femxarxa.cat
pointos.com
merzi.info
drinkseed.com
tophumanservicescourses.com
visiativ-industry.fr
antenanavi.com
vihannesporssi.fi
insp.bi
ncs-graphic-studio.com
calxplus.eu
paymybill.guru
camsadviser.com
yassir.pro
coursio.com
allamatberedare.se
brawnmediany.com
rollingrockcolumbia.com
aprepol.com
classycurtainsltd.co.uk
sla-paris.com
naswrrg.org
madinblack.com
happyeasterimages.org
noskierrenteria.com
321play.com.hk
verbisonline.com
pierrehale.com
kostenlose-webcams.com
amylendscrestview.com
c-a.co.in
associationanalytics.com
faroairporttransfers.net
x-ray.ca
kath-kirche-gera.de
babcockchurch.org
restaurantesszimmer.de
lescomtesdemean.be
crowcanyon.com
ceid.info.tr
bouncingbonanza.com
phantastyk.com
servicegsm.net
chrissieperry.com
colorofhorses.com
vibethink.net
aunexis.ch
bigasgrup.com
nacktfalter.de
igrealestate.com
berlin-bamboo-bikes.org
vitavia.lt
qualitus.com
ulyssemarketing.com
celularity.com
agence-chocolat-noir.com
global-kids.info
comparatif-lave-linge.fr
tinkoff-mobayl.ru
stallbyggen.se
figura.team
elpa.se
you-bysia.com.au
burkert-ideenreich.de
humancondition.com
erstatningsadvokaterne.dk
clos-galant.com
xn--fn-kka.no
mediaacademy-iraq.org
lillegrandpalais.com
exenberger.at
bockamp.com
maasreusel.nl
kissit.ca
roadwarrior.app
web.ion.ag
raschlosser.de
beaconhealthsystem.org
thee.network
vesinhnha.com.vn
saka.gr
fotoideaymedia.es
pivoineetc.fr
latestmodsapks.com
deprobatehelp.com
hannah-fink.de
lloydconstruction.com
tips.technology
rimborsobancario.net
patrickfoundation.net
odiclinic.org
alvinschwartz.wordpress.com
rumahminangberdaya.com
jbbjw.com
simpliza.com
zenderthelender.com
norovirus-ratgeber.de
coastalbridgeadvisors.com
otto-bollmann.de
admos-gleitlager.de
latribuessentielle.com
oneplusresource.org
partnertaxi.sk
sipstroysochi.ru
celeclub.org
faronics.com
euro-trend.pl
i-arslan.de
naturavetal.hr
milsing.hr
klimt2012.info
assurancesalextrespaille.fr
pelorus.group
waywithwords.net
ivivo.es
narcert.com
deoudedorpskernnoordwijk.nl
ceres.org.au
surespark.org.uk
accountancywijchen.nl
manifestinglab.com
outcomeisincome.com
themadbotter.com
zonamovie21.net
ra-staudte.de
stefanpasch.me
plastidip.com.ar
ditog.fr
bodyforwife.com
dirittosanitario.biz
mytechnoway.com
zimmerei-deboer.de
yourobgyn.net
videomarketing.pro
cafemattmeera.com
eaglemeetstiger.de
aurum-juweliere.de
8449nohate.org
icpcnj.org
freie-baugutachterpraxis.de
d2marketing.co.uk
dramagickcom.wordpress.com
aglend.com.au
polychromelabs.com
rozemondcoaching.nl
theduke.de
senson.fi
hebkft.hu
bee4win.com
fitnessingbyjessica.com
hhcourier.com
sportsmassoren.com
veybachcenter.de
iyengaryogacharlotte.com
highimpactoutdoors.net
deepsouthclothingcompany.com
cnoia.org
ussmontanacommittee.us
morawe-krueger.de
nestor-swiss.ch
nsec.se
commonground-stories.com
onlyresultsmarketing.com
otsu-bon.com
abogadoengijon.es
travelffeine.com
whyinterestingly.ru
noesis.tech
pcprofessor.com
mountsoul.de
jameskibbie.com
levdittliv.se
corelifenutrition.com
diversiapsicologia.es
smart-light.co.uk
jiloc.com
ralister.co.uk
fotoscondron.com
collaborativeclassroom.org
christinarebuffetcourses.com
lubetkinmediacompanies.com
4youbeautysalon.com
bouquet-de-roses.com
extensionmaison.info
seproc.hn
insigniapmg.com
sotsioloogia.ee
krlosdavid.com
edelman.jp
space.ua
transportesycementoshidalgo.es
bildungsunderlebnis.haus
triggi.de
rosavalamedahr.com
upmrkt.co
supportsumba.nl
stoeferlehalle.de
dontpassthepepper.com
yamalevents.com
roygolden.com
vetapharma.fr
cuppacap.com
socialonemedia.com
glennroberts.co.nz
mirkoreisser.de
mooglee.com
katketytaanet.fi
boldcitydowntown.com
parebrise-tla.fr
sinal.org
simoneblum.de
unim.su
grelot-home.com
transliminaltribe.wordpress.com
autofolierung-lu.de
luxurytv.jp
fannmedias.com
hihaho.com
thenewrejuveme.com
pasvenska.se
iphoneszervizbudapest.hu
goodgirlrecovery.com
behavioralmedicinespecialists.com
centromarysalud.com
eraorastudio.com
smokeysstoves.com
jobcenterkenya.com
sanyue119.com
katiekerr.co.uk
myteamgenius.com
meusharklinithome.wordpress.com
cerebralforce.net
reddysbakery.com
zieglerbrothers.de
stampagrafica.es
portoesdofarrobo.com
chaotrang.com
skanah.com
wmiadmin.com
anthonystreetrimming.com
bogdanpeptine.ro
sagadc.com
maratonaclubedeportugal.com
micro-automation.de
rocketccw.com
waermetauscher-berechnen.de
blumenhof-wegleitner.at
smithmediastrategies.com
koko-nora.dk
thaysa.com
scenepublique.net
fransespiegels.nl
homesdollar.com
helenekowalsky.com
quizzingbee.com
filmstreamingvfcomplet.be
seitzdruck.com
trulynolen.co.uk
petnest.ir
flexicloud.hk
podsosnami.ru
americafirstcommittee.org
tomoiyuma.com
praxis-foerderdiagnostik.de
delawarecorporatelaw.com
ligiercenter-sachsen.de
troegs.com
zzyjtsgls.com
abogadosadomicilio.es
minipara.com
htchorst.nl
dinslips.se
bingonearme.org
sairaku.net
vickiegrayimages.com
mdk-mediadesign.de
smale-opticiens.nl
geisterradler.de
bradynursery.com
vox-surveys.com
irinaverwer.com
abogados-en-alicante.es
creative-waves.co.uk
danielblum.info
bayoga.co.uk
conasmanagement.de
hmsdanmark.dk
answerstest.ru
marketingsulweb.com
naturstein-hotte.de
karacaoglu.nl
gantungankunciakrilikbandung.com
officehymy.com
bloggyboulga.net
psa-sec.de
controldekk.com
myhealth.net.au
1kbk.com.ua
love30-chanko.com
fiscalsort.com
healthyyworkout.com
maxadams.london
abl1.net
friendsandbrgrs.com
tenacitytenfold.com
tulsawaterheaterinstallation.com
bargningavesta.se
thailandholic.com
verifort-capital.de
allure-cosmetics.at
layrshift.eu
buroludo.nl
xn--thucmctc-13a1357egba.com
liveottelut.com
vanswigchemdesign.com
polymedia.dk
liliesandbeauties.org
jorgobe.at
jandaonline.com
slimidealherbal.com
-
net
true
-
pid
$2a$10$vhHqn39Fla4EMRtpq8PraeeTm62fwZ0b7u0Ntc9c4ECRw88ob4Uie
-
prc
outlook
xfssvccon
oracle
wordpad
ocomm
mydesktopservice
mydesktopqos
ocautoupds
steam
infopath
powerpnt
dbeng50
thebat
thunderbird
dbsnmp
mspub
tbirdconfig
isqlplussvc
visio
firefox
agntsvc
sqbcoreservice
winword
sql
ocssd
excel
encsvc
synctime
onenote
msaccess
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-read-me.txt and follow instuctions
-
ransom_template
---=== Welcome Progetti Servizi Verona s.r.l ===--- [+] Whats Happen? [+] Your network has been penetrated. Your files are encrypted with strong military algorithm, and currently unavailable. You can check it: all files on your system has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). Also, all your business info copyed to our servers. Personal data of your clients and business contacts extracted. If you do not take action to contact us, the data will be published fo free access everyone. It can also cause GDPR compilance. “Article 32, (1) – c states that “The controller and the processor shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident.” It can hurt organizations where it matters most – Penalties can be as high as €20M or 4% of annual revenues, not to mention the negative public relations fallout. As soon as we receive the payment, all data will be deleted from our servers. [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.cc/{UID} Contact with us in chat on website. You have 3 days. If you need more time to make a decision and collect money for payment - inform the support chat about this. [+] How will the decryption process proceed after payment? [+] After payment we will send to you our scanner-decoder program and detailed instructions for use. With this program you will be able to decrypt all your encrypted files. Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
3833
-
svc
svc$
sql
sophos
mepocs
memtas
veeam
vss
backup
Extracted
C:\Users\4teh8h-read-me.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/F65B27EB260E0788
http://decryptor.cc/F65B27EB260E0788
Extracted
C:\Users\c9d47t4-read-me.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/7833288AE11E6C73
http://decryptor.cc/7833288AE11E6C73
Targets
-
-
Target
f399f74045c127d9bab9b10fa2e81ea9_JaffaCakes118
-
Size
166KB
-
MD5
f399f74045c127d9bab9b10fa2e81ea9
-
SHA1
fa73ebc39f144e16da0b823baa594861535d094d
-
SHA256
58ca453b81a5506420ef00a945ad3b3841e4ad7d5ecaf1bb983ac3c3db5ab8c1
-
SHA512
3533726b13aa0f98338896afa74b04f5f5a9b8a585357077916b06c02871585ead103048aee981e5ea9d9fdd1c87c196db445b55e98d1a984b1aeff43bd5c7d1
-
SSDEEP
3072:EJMawtnGqtWoKeZC62aoNUSncCyxFXtuk3F8/A:+w9vteQJYUoczJIA
Score10/10-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-