General
-
Target
f616649678086937974629a0eddb4b62_JaffaCakes118
-
Size
143KB
-
Sample
240925-qez99szgle
-
MD5
f616649678086937974629a0eddb4b62
-
SHA1
a653819fd32eb75d85a6ed8da307642a464d8a64
-
SHA256
47b7bc8b1966047564c17d8606d422664e98ba588e0de606bf8fb0c86c0f866c
-
SHA512
a87ff70e8ff0b0097dc7457e50c7c0f2fd24587f25cc221dc549cb99f65e4be61acea3c9488270813ea252488d319d82ee65f070170e8b1df726578f49218c15
-
SSDEEP
3072:Op5SexkWi1Lbi4eTMlwDCnu/qUwxKcJj:kvGWwbnWJ/hwxKcJ
Behavioral task
behavioral1
Sample
f616649678086937974629a0eddb4b62_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f616649678086937974629a0eddb4b62_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
sodinokibi
5
436
rishigangoly.com
towelroot.co
yourcosmicbeing.com
veggienessa.com
frameshift.it
eventosvirtualesexitosos.com
kvetymichalovce.sk
altocontatto.net
buonabitare.com
chatterchatterchatter.com
rename.kz
barbaramcfadyenjewelry.com
biodentify.ai
wordpress.idium.no
stoneridgemontessori.com
tweedekansenloket.nl
domilivefurniture.com
thegetawaycollective.com
hawaiisteelbuilding.com
liveyourheartout.co
werkzeugtrolley.net
wribrazil.com
bmw-i-pure-impulse.com
johnkoen.com
opticahubertruiz.com
qandmmusiccenter.com
eshop.design
k-v-f.de
furland.ru
tchernia-conseil.fr
dentalcircle.com
centuryvisionglobal.com
narca.net
cops4causes.org
turing.academy
transifer.fr
qrs-international.com
scietech.academy
ceocenters.com
selected-minds.de
jaaphoekzema.nl
vdolg24.online
carsten.sparen-it.de
alene.co
condormobile.fr
kryptos72.com
rentingwell.com
blucamp.com
bcabattoirs.org
watchsale.biz
uncensoredhentaigif.com
optigas.com
chainofhopeeurope.eu
cxcompany.com
kryddersnapsen.dk
enactusnhlstenden.com
fire-space.com
mac-computer-support-hamburg.de
drbenveniste.com
mjk.digital
prodentalblue.com
marcandy.com
unboxtherapy.site
elitkeramika-shop.com.ua
jag.me
kristianboennelykke.dk
oexebusiness.com
shrinkingplanet.com
allinonecampaign.com
distrifresh.com
piestar.com
9nar.com
solutionshosting.co.uk
monstarrsoccer.com
encounter-p.net
globalcompliancenews.com
myfbateam.com
nieuwsindeklas.be
diverfiestas.com.es
boomerslivinglively.com
apogeeconseils.fr
leadforensics.com
mediabolmong.com
ziliak.com
tradenavigator.ch
vvego.com
customroasts.com
luvinsburger.fr
the-beauty-guides.com
linkbuilding.life
omnicademy.com
nrgvalue.com
premiumweb.com.ua:443
nutriwell.com.sg
landgoedspica.nl
catchup-mag.com
computer-place.de
harleystreetspineclinic.com
letsstopsmoking.co.uk
breathebettertolivebetter.com
nepal-pictures.com
oraweb.net
fascaonline.com
internalresults.com
mind2muscle.nl
bubbalucious.com
campusescalade.com
gta-jjb.fr
mieleshopping.it
dreamvoiceclub.org
docarefoundation.org
pinkxgayvideoawards.com
kuriero.pro
ygallerysalonsoho.com:443
thepixelfairy.com
patriotcleaning.net
keuken-prijs.nl
morgansconsult.com
pro-gamer.pl
galaniuklaw.com
chinowarehousespace.com
modamarfil.com
designimage.ae
agrifarm.dk
lexced.com
fskhjalmar.se
sytzedevries.com
craftstone.co.nz
aberdeenartwalk.org
indiebizadvocates.org
rokthetalk.com
grancanariaregional.com
happycatering.de
physio-lang.de
bodymindchallenger.com
o2o-academy.com
saint-malo-developpement.fr
egpu.fr
bcmets.info
poems-for-the-soul.ch
hospitalitytrainingsolutions.co.uk
acumenconsultingcompany.com
lookandseen.com
innersurrection.com
alltagsrassismus-entknoten.de
biketruck.de
circuit-diagramz.com
yayasanprimaunggul.org
hostaletdelsindians.es
lmmont.sk
justaroundthecornerpetsit.com
theintellect.edu.pk
sunsolutions.es
frimec-international.es
masecologicos.com
babysitting-hk.helpergo.co
groovedealers.ru
voetbalhoogeveen.nl
dmlcpa.com
welovecustomers.fr
smartmind.net
voice2biz.com
santastoy.store
benchbiz.com
zwemofficial.nl
c-sprop.com
richardmaybury.co.uk
gratiocafeblog.wordpress.com
kompresory-opravy.com
molinum.pt
fazagostar.co
mazzaropi.com.br
littlesaints.academy
duthler.nl
hostastay.com
hameghlim.com
jmmartinezilustrador.com
marmarabasin.com
bilius.dk
betterce.com
pankiss.ru
hinotruckwreckers.com.au
tatyanakopieva.ru
business-basic.de
bringmehope.org
elex.is
expohomes.com
bratek-immobilien.de
iexpert99.com
amorbellezaysalud.com
xn--ziinoapte-6ld.ro
apiarista.de
tzn.nu
skyboundnutrition.co.uk
bridalcave.com
baikalflot.ru
operativadigital.com
bruut.online
zaczytana.com
corporacionrr.com
factorywizuk.com
smarttourism.academy
bumbipdeco.site
redctei.co
ronielyn.com
raeoflightmusic.com
apmollerpension.com
theater-lueneburg.de
hm-com.com
smartspeak.com
die-immo-agentur.de
johnsonweekly.com
ciga-france.fr
blueridgeheritage.com
mercadodelrio.com
heimdalbygg.no
ramirezprono.com
strauchs-wanderlust.info
devus.de
so-sage.fr
springfieldplumbermo.com
campusce.com
sprintcoach.com
jdscenter.com
riffenmattgarage.ch
eurethicsport.eu
switch-made.com
witraz.pl
ncn.nl
lunoluno.com
birthplacemag.com
geitoniatonaggelon.gr
citydogslife.com
vedsegaard.dk
pvandambv.nl
ced-elec.com
ayudaespiritualtamara.com
housesofwa.com
hotjapaneselesbian.com
texanscan.org
therapybusinessacademy.com
sellthewrightway.com
fitnessblenderstory.com
charlesfrancis.photos
mahikuchen.com
floweringsun.org
spirello.nl
log-barn.co.uk
drvoip.com
ultimatelifesource.com
ownidentity.com
agenceassemble.fr
kartuindonesia.com
hawthornsretirement.co.uk
atelierkomon.com
vipcarrental.ae
ilveshistoria.com
solidhosting.nl
sbit.ag
skinkeeper.li
auberives-sur-vareze.fr
photographycreativity.co.uk
stagefxinc.com
omegamarbella.com
innovationgames-brabant.nl
stage-infirmier.fr
epicjapanart.com
axisoflove.org:443
brannbornfastigheter.se
nalliasmali.net
hoteltantra.com
kiraribeaute-nani.com
epsondriversforwindows.com
thestudio.academy
akwaba-safaris.com
edrickennedymacfoy.com
gbk-tp1.de
atma.nl
onesynergyinternational.com
bonitabeachassociation.com
mariamalmahdi.com
stitch-n-bitch.com
bd2fly.com
vitormmcosta.com
primemarineengineering.com
spacebel.be
happylublog.wordpress.com
logosindustries.com
pays-saint-flour.fr
sycamoregreenapts.com
ketomealprep.academy
gatlinburgcottage.com
baumfinancialservices.com
palmecophilippines.com
subquercy.fr
palema.gr
thisprettyhair.com
reygroup.pt
endstarvation.com
o90.dk
alcye.com
bluelakevision.com
banukumbak.com
gavelmasters.com
adaduga.info
111firstdelray.com
peninggibadan.co.id
nexstagefinancial.com
jalkapuu.net
mbuildinghomes.com
topautoinsurers.net
hvitfeldt.dk
paardcentraal.nl
limmortelyouth.com
bellesiniacademy.org
saboboxtel.uk
ledyoucan.com
pokemonturkiye.com
kerstliedjeszingen.nl
hensleymarketing.com
thiagoperez.com
drnelsonpediatrics.com
asiaartgallery.jp
ddmgen.com
buzzneakers.com
randyabrown.com
ocduiblog.com
glennverschueren.be
miscbo.it
krishnabrawijaya.com
worldproskitour.com
purepreprod4.com
awaitspain.com
angeleyezstripclub.com
bakingismyyoga.com
andreaskildegaard.dk
easydental.ae
hypogenforensic.com
loparnille.se
bundan.com
grupoexin10.com
janasfokus.com
bayshoreelite.com
unexplored.gr
crestgood.com
billigeflybilletter.dk
ingresosextras.online
andrealuchesi.it
avisioninthedesert.com
affligemsehondenschool.be
xn--80addfr4ahr.dp.ua
aoyama.ac
imajyuku-sozoku.com
edvestors.org
rozmata.com
datatri.be
parentsandkids.com
mediahub.co.nz
initconf.com
nuohous.com
topvijesti.net
juergenblaetz.de
phukienbepthanhdat.com
ntinasfiloxenia.gr
animation-pro.co.uk
entdoctor-durban.com
scotlandsroute66.co.uk
paprikapod.com
jeanmonti.com
trainiumacademy.com
cesep2019.com
jandhpest.com
alabamaroofingllc.com
linearete.com
aceroprime.com
mamajenedesigns.com
zumrutkuyutemel.com
testitjavertailut.net
alisodentalcare.com
cap29010.it
arearugcleaningnyc.com
karelinjames.com
ludoil.it
handyman-silkeborg.dk
fotoslubna.com
campinglaforetdetesse.com
tanatek.com
magnetvisual.com
jollity.hu
stanleyqualitysystems.com
sambaglow.com
oncarrot.com
onlinetvgroup.com
clemenfoto.dk
mariannelemenestrel.com
bulyginnikitav.000webhostapp.com
metallbau-hartmann.eu
silkeight.com
protoplay.ca
chatberlin.de
11.in.ua
leloupblanc.gr
abulanov.com
framemyballs.com
parisschool.ru
rino-gmbh.com
nginx.com
fbmagazine.ru
jax-interim-and-projectmanagement.com
azloans.com
gaearoyals.com
cuadc.org
frankgoll.com
trivselsguide.dk
malzomattalar.com
belinda.af
thesilkroadny.com
internestdigital.com
hostingbangladesh.net
volta.plus
speiserei-hannover.de
catering.com
casinodepositors.com
alharsunindo.com
laylavalentine.com
jobstomoveamerica.org
denhaagfoodie.nl
karmeliterviertel.com
fi-institutionalfunds.com
signededenroth.dk
unislaw-narty.pl
livedeveloper.com
skooppi.fi
aciscomputers.com
cmascd.com
xn--billigafrgpatroner-stb.se
cotton-avenue.co.il
awag-blog.de
ideamode.com
billscars.net
kausette.com
jacquesgarcianoto.com
lassocrm.com
artvark.nl
dieetuniversiteit.nl
wasnederland.nl
precisetemp.com
licensed-public-adjuster.com
rizplakatjaya.com
natturestaurante.com.br
mollymccarthydesign.com
enews-qca.com
polynine.com
lgiwines.com
renderbox.ch
fysiotherapierijnmond.nl
avis.mantova.it
dibli.store
rtc24.com
rentsportsequip.com
ahgarage.com
moira-cristescu.com
bendel-partner.de
nationnewsroom.com
webforsites.com
donau-guides.eu
graygreenbiomedservices.com
adedesign.com
haard-totaal.nl
bagaholics.in
nauticmarine.dk
gazelle-du-web.com
amyandzac.com
scentedlair.com
factoriareloj.com
endlessrealms.net
energosbit-rp.ru
studionumerik.fr
arthakapitalforvaltning.dk
christopherhannan.com
delegationhub.com
almamidwifery.com
neonodi.be
rs-danmark.dk
sppdstats.com
speakaudible.com
greatofficespaces.net
stabilisateur.fr
yuanshenghotel.com
k-zubki.ru
markseymourphotography.co.uk
pilotgreen.com
ivancacu.com
fixx-repair.com
techybash.com
trevi-vl.ru
maryairbnb.wordpress.com
lovetzuchia.com
pourlabretagne.bzh
scholarquotes.com
adabible.org
mrcar.nl
medicalsupportco.com
sochi-okna23.ru
daveystownhouse.com
suonenjoen.fi
advanced-removals.co.uk
lagschools.ng
louiedager.com
kenmccallum.com
latteswithleslie.com
carolynfriedlander.com
skyscanner.ro
placermonticello.com
beauty-traveller.com
buffdaddyblog.com
skolaprome.eu
eyedoctordallas.com
tutvracks.com
perceptdecor.com
mneti.ru
annida.it
curtsdiscountguns.com
drbrianhweeks.com
lidkopingsnytt.nu
leatherjees.com
qwikcoach.com
supercarhire.co.uk
satoblog.org
rubyaudiology.com
bescomedical.de
the-cupboard.co.uk
putzen-reinigen.com
lesyeuxbleus.net
startuplive.org
galatee-couture.com
legundschiess.de
stathmoulis.gr
rolleepollee.com
globalskills.pt
finnergo.eu
agendatwentytwenty.com
domaine-des-pothiers.com
manzel.tn
spartamovers.com
midwestschool.org
promus.ca
ninjaki.com
gosouldeep.com
kemtron.fr
thegrinningmanmusical.com
simpleitsolutions.ch
pazarspor.org.tr
diakonie-weitramsdorf-sesslach.de
glas-kuck.de
tecleados.com
mike.matthies.de
cormanmarketing.com
larchwoodmarketing.com
advesa.com
dinecorp.com
cyberpromote.de
dentourage.com
descargandoprogramas.com
lumturo.academy
renehartman.nl
blavait.fr
geoweb.software
bourchier.org
bavovrienden.nl
tetameble.pl
walterman.es
ijsselbeton.nl
wineandgo.hu
spectamarketingdigital.com.br
b3b.ch
oscommunity.de
iactechnologies.net
5thactors.com
kombi-dress.com
brighthillgroup.com
mangimirossana.it
pixelhealth.net
wademurray.com
block-optic.com
lisa-poncon.fr
terraflair.de
beandrivingschool.com.au
forumsittard.nl
stringnosis.academy
sarahspics.co.uk
matteoruzzaofficial.com
mrmac.com
jlwilsonbooks.com
yvesdoin-aquarelles.fr
motocrossplace.co.uk
verbouwingsdouche.nl
acornishstudio.co.uk
publicompserver.de
irizar.com
xn--80abehgab4ak0ddz.xn--p1ai
koncept-m.ru
goddardleadership.org
antesacademy.it
kafkacare.com
electricianul.com
foerderverein-vatterschule.de
citiscapes-art.com
istantidigitali.com
inewsstar.com
mustangmarketinggroup.com
grafikstudio-visuell.de
n-newmedia.de
anchelor.com
collegetennis.info
nykfdyrehospital.dk
dr-vita.de
nxtstg.org
eastgrinsteadwingchun.com
muller.nl
the3-week-diet.net
arabianmice.com
sealgrinderpt.com
augen-praxisklinik-rostock.de
90nguyentuan.com
advancedeyecare.com
motocrosshideout.com
skidpiping.de
projektparkiet.pl
plbinsurance.com
kellengatton.com
vapiano.fr
buerocenter-butzbach-werbemittel.de
yourhappyevents.fr
baita.ac
professionetata.com
oro.ae
lyricalduniya.com
ox-home.com
teamsegeln.ch
sololibrerie.it
hepishopping.com
fla.se
thehovecounsellingpractice.co.uk
parseport.com
boloria.de
the5thquestion.com
druktemakersheerenveen.nl
holocine.de
tieronechic.com
cookinn.nl
angelika-schwarz.com
kosten-vochtbestrijding.be
livelai.com
parksideseniorliving.net
agriturismocastagneto.it
jobkiwi.com.ng
eksperdanismanlik.com
wg-heiligenstadt.de
keyboardjournal.com
zdrowieszczecin.pl
innervisions-id.com
cp-bap.de
richardkershawwines.co.za
molade.nl
lsngroupe.com
penumbuhrambutkeiskei.com
shortsalemap.com
airserviceunlimited.com
jameswilliamspainting.com
jglconsultancy.com
leansupremegarcinia.net
leopoldineroux.com
smartworkplaza.com
askstaffing.com
dentallabor-luenen.de
bluemarinefoundation.com
agora-collectivites.com
alaskaremote.com
brinkdoepke.eu
rvside.com
goeppinger-teppichreinigung.de
alpesiberie.com
efficiencyconsulting.es
cleanroomequipment.ie
four-ways.com
fsbforsale.com
lifeinbreaths.com
myplaywin3.com
napisat-pismo-gubernatoru.ru:443
rhino-storage.co.uk
etgdogz.de
advance-refle.com
anleggsregisteret.no
cincinnatiphotocompany.org
singletonfinancial.com
ronaldhendriks.nl
3daywebs.com
angelsmirrorus.com
otpusk.zp.ua
m2graph.fr
mariajosediazdemera.com
liepertgrafikweb.at
wallflowersandrakes.com
dcc-eu.com
cssp-mediation.org
cymru.futbol
loysonbryan.com
cmeow.com
fidelitytitleoregon.com
mgimalta.com
cardsandloyalty.com
wrinstitute.org
neolaiamedispa.com
belofloripa.be
limounie.com
forextimes.ru
klapanvent.ru
kroophold-sjaelland.dk
banksrl.co.za
jimprattmediations.com
glende-pflanzenparadies.de
cascinarosa33.it
matthieupetel.fr
futurenetworking.com
oportowebdesign.com
signamedia.de
bertbutter.nl
airvapourbarrier.com
funworx.de
prometeyagro.com.ua
fluzfluzrewards.com
leijstrom.com
salonlamar.nl
stralsund-ansichten.de
slotenmakerszwijndrecht.nl
kookooo.com
nourella.com
taulunkartano.fi
evsynthacademy.org
creohn.de
mayprogulka.ru
gardenpartner.pl
pureelements.nl
christianscholz.de
skoczynski.eu
bychowo.pl
nepressurecleaning.com
bluetenreich-brilon.de
catalyseurdetransformation.com
profiz.com
successcolony.com.ng
denverwynkoopdentist.com
victorvictoria.com
t3brothers.com
kelsigordon.com
jobscore.com
mrkluttz.com
brownswoodblog.com
johnstonmingmanning.com
radishallgood.com
invela.dk
aslog.fr
osn.ro
gsconcretecoatings.com
comoserescritor.com
onlinemarketingsurgery.co.uk
janellrardon.com
sweetz.fr
lollachiro.com
redpebblephotography.com
awaisghauri.com
circlecitydj.com
metcalfe.ca
mindsparkescape.com
oththukaruva.com
global-migrate.com
makingmillionaires.net
craftron.com
schulz-moelln.de
ikzoekgod.be
5pointpt.com
universelle.fr
brisbaneosteopathic.com.au
avtoboss163.ru:443
chorusconsulting.net
fotoeditores.com
insane.agency
fridakids.com
luvbec.com
site.markkit.com.br
kamin-somnium.de
breakluckrecords.com
malevannye.ru
hotelturbo.de
mediogiro.com.ar
whoopingcrane.com
dayenne-styling.nl
envomask.com
tages-geldvergleich.de
tothebackofthemoon.com
finsahome.co.uk
hom-frisor.dk
levencovka.ru
nevadaruralhousingstudies.org
sachainchiuk.com
acibademmobil.com.tr
palmenhaus-erfurt.de
orchardbrickwork.com
lashandbrowenvy.com
altitudeboise.com
lapponiasafaris.com
rsidesigns.com
devplus.be
powershell.su
michal-s.co.il
olry-cloisons.fr
metriplica.academy
dantreranch.com
slotspinner.com
jayfurnitureco.com
soncini.ch
aquacheck.co.za
carmel-york.com
wirmuessenreden.com
nvisionsigns.com
rossomattonecase.it
peppergreenfarmcatering.com.au
eatyoveges.com
ilovefullcircle.com
paradigmlandscape.com
rapid5kloan.org
look.academy
martinipstudios.com
line-x.co.uk
hartofurniture.com
naukaip.ru
pubcon.com
davedavisphotos.com
dennisverschuur.com
mundo-pieces-auto.fr
azerbaycanas.com
sveneulberg.de
vitoriaecoturismo.com.br
directique.com
1deals.com
alattekniksipil.com
basindentistry.com
explora.nl
dnqa.co.uk
alnectus.com
animalfood-online.de
broccolisoep.nl
astrographic.com
teethinadaydentalimplants.com
agencewho-aixenprovence.fr
zorgboerderijravensbosch.nl
theboardroomafrica.com
dierenambulancealkmaar.nl
2020hindsight.info
ufovidmag.com
direitapernambuco.com
subyard.com
coachpreneuracademy.com
richardiv.com
ravage-webzine.nl
reputation-medical.online
liverpoolabudhabi.ae
nicksrock.com
csaballoons.com
triplettabordeaux.fr
valiant-voice.com
interlinkone.com
cainlaw-okc.com
espaciopolitica.com
ikadomus.com
greeneyetattoo.com
letterscan.de
charlottelhanna.com
husetsanitas.dk
premier-iowa.com
noda.com.ua
billyoart.com
bodet150ans.com
mondolandscapes.com
newonestop.com
bajova.sk
akcadagofis.com
reizenmetkinderen.be
pedmanson.com
phoenixcrane.com
sber-biznes.com
jonnyhooley.com
deziplan.ru
fann.ru
outstandingminialbums.com
slideevents.be
tramadolhealth.com
metroton.ru
cac2040.com
toranjtuition.org
cc-experts.de
gurutechnologies.net
schluesseldienste-hannover.de
rarefoods.ro
brunoimmobilier.com
triplettagaite.fr
ruggestar.ch
mursall.de
aheadloftladders.co.uk
muni.pe
golfclublandgoednieuwkerk.nl
iron-mine.ru
alexwenzel.de
alwaysdc.com
julielusktherapy.com
schlagbohrmaschinetests.com
silverbird.dk
biblica.com
bjornvanvulpen.nl
pinthelook.com
netadultere.fr
g2mediainc.com
margaretmcshane.com
bohrlochversicherung.info
tellthebell.website
fanuli.com.au
michaelfiegel.com
afbudsrejserallinclusive.dk
tilldeeke.de
flossmoordental.com
martha-frets-ceramics.nl
hutchstyle.co.uk
pajagus.fr
goodherbalhealth.com
boyfriendsgoal.site
levelseven.be
jlgraphisme.fr
lovcase.com
suitesartemis.gr
ebible.co
ykobbqchicken.ca
memphishealthandwellness.com
adterium.com
xrresources.com
haus-landliebe.de
annenymus.com
dogsunlimitedguide.com
eafx.pro
auto-opel.ro
traitware.com
arazi.eus
greenrider.nl
digitale-elite.de
stressreliefadvice.com
zuerich-umzug.ch
soundseeing.net
clinic-beethovenstrasse-ag.ch
relevantonline.eu
kdbrh.com
dinedrinkdetroit.com
mensemetgesigte.co.za
triavlete.com
patassociation.com
yournextshoes.com
racefietsenblog.nl
min-virksomhed.dk
itheroes.dk
zealcon.ae
deduktia.fi
uci-france.fr
pharmeko-group.com
mazift.dk
girlish.ae
theatre-embellie.fr
autoteamlast.de
georgemuncey.com
hnkns.com
saberconcrete.com
activeterroristwarningcompany.com
wyreforest.net
profibersan.com
p-ride.live
acb-gruppe.ch
zinnystar.com
goodboyscustom.com
rattanwarehouse.co.uk
baptistdistinctives.org
albcleaner.fr
andermattswisswatches.ch
imaginekithomes.co.nz
eos-horlogerie.com
weddingceremonieswithtim.com
nbva.co.uk
perfectgrin.com
a-zpaperwork.eu
photonag.com
artcase.pl
focuskontur.com
elliemaccreative.wordpress.com
amelielecompte.wordpress.com
tastevirginia.com
der-stempelking.de
queertube.net
katherinealy.com
aktivfriskcenter.se
chomiksy.net
guohedd.com
rechtenplicht.be
thenalpa.com
tbalp.co.uk
production-stills.co.uk
schroederschoembs.com
aidanpublishing.co.uk
hekecrm.com
sharonalbrightdds.com
quitescorting.com
specialtyhomeservicesllc.com
test-teleachat.fr
mesajjongeren.nl
latableacrepes-meaux.fr
magrinya.net
atrgroup.it
bookingwheel.com
ya-elka.ru
sjtpo.org
jakubrybak.com
hiddensee-buhne11.de
pisofare.co
berdonllp.com
pxsrl.it
humanviruses.org
claudiakilian.de
shortysspices.com
lattalvor.com
imagine-entertainment.com
xtensifi.com
web865.com
rivermusic.nl
forskolinslimeffect.net
maxcube24.com.ua
pansionatblago.ru
teutoradio.de
mindfuelers.com
laaisterplakky.nl
heuvelland-oaze.nl
kickittickets.com
fta-media.com
opt4cdi.com
ncjc.ca
sshomme.com
from02pro.com
colored-shelves.com
cl0nazepamblog.com
jefersonalessandro.com
go.labibini.ch
burg-zelem.de
janmorgenstern.com
tesisatonarim.com
secrets-clubs.co.uk
proffteplo.com
mslp.org
smartercashsystem.com
khtrx.com
chris-anne.com
rhino-turf.com
mikegoodfellow.co.uk
craftingalegacy.com
concontactodirecto.com
utilisacteur.fr
bg.szczecin.pl
amco.net.au
achetrabalhos.com
-
net
false
-
pid
5
-
prc
excel.exe
sqlwriter.exe
mspub.exe
encsvc.exe
agntsvc.exe
dbsnmp.exe
mysqld_nt.exe
thunderbird.exe
sqlservr.exe
outlook.exe
visio.exe
thebat64.exe
mydesktopservice.exe
ocssd.exe
wordpad.exe
mydesktopqos.exe
msftesql.exe
powerpnt.exe
sqlagent.exe
firefoxconfig.exe
isqlplussvc.exe
xfssvccon.exe
infopath.exe
winword.exe
mysqld_opt.exe
mysqld.exe
msaccess.exe
sqbcoreservice.exe
ocomm.exe
steam.exe
sqlbrowser.exe
ocautoupds.exe
oracle.exe
thebat.exe
tbirdconfig.exe
synctime.exe
onenote.exe
dbeng50.exe
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on you computer has expansion {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.top/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} Extension name: {EXT} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
436
Extracted
C:\Users\a4znl8204-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/96FEEA6FF32E9492
http://decryptor.top/96FEEA6FF32E9492
Extracted
C:\Users\bdu182-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/6CF8AD9C94B07B66
http://decryptor.top/6CF8AD9C94B07B66
Targets
-
-
Target
f616649678086937974629a0eddb4b62_JaffaCakes118
-
Size
143KB
-
MD5
f616649678086937974629a0eddb4b62
-
SHA1
a653819fd32eb75d85a6ed8da307642a464d8a64
-
SHA256
47b7bc8b1966047564c17d8606d422664e98ba588e0de606bf8fb0c86c0f866c
-
SHA512
a87ff70e8ff0b0097dc7457e50c7c0f2fd24587f25cc221dc549cb99f65e4be61acea3c9488270813ea252488d319d82ee65f070170e8b1df726578f49218c15
-
SSDEEP
3072:Op5SexkWi1Lbi4eTMlwDCnu/qUwxKcJj:kvGWwbnWJ/hwxKcJ
-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Direct Volume Access
1Indicator Removal
2File Deletion
2Modify Registry
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1