Behavioral task
behavioral1
Sample
f849f1a918db29de3d9b6973fdcf17f6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f849f1a918db29de3d9b6973fdcf17f6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
f849f1a918db29de3d9b6973fdcf17f6_JaffaCakes118
-
Size
164KB
-
MD5
f849f1a918db29de3d9b6973fdcf17f6
-
SHA1
1d132bd0089d393e0df8e2ba9c70d692cc69ddb3
-
SHA256
1d7ec7dfa37ab698e6c57ce2700d113c1e781d859e8fb7c7f1a5b5ee6e85d039
-
SHA512
9aaf82a0e96afdbbe968d0747557b6672cf0d20603d84fe3352893e4a8d7c0d7f770dac64676ab84c28f16788e6923cf7f98f59709b13bad8af724b37398ab35
-
SSDEEP
3072:v0XoUeZ/DVS8L73ea4MoCLfqQvFfpL35lc/:veoUeZR2TRCWQFftpla
Malware Config
Extracted
sodinokibi
65
2906
olry-cloisons.fr
nieuwsindeklas.be
zealcon.ae
hotjapaneselesbian.com
spectamarketingdigital.com.br
acornishstudio.co.uk
yayasanprimaunggul.org
lsngroupe.com
autoteamlast.de
startuplive.org
thesilkroadny.com
askstaffing.com
signamedia.de
sarahspics.co.uk
mikegoodfellow.co.uk
mindsparkescape.com
tatyanakopieva.ru
anleggsregisteret.no
specialtyhomeservicesllc.com
hospitalitytrainingsolutions.co.uk
leadforensics.com
rename.kz
site.markkit.com.br
fridakids.com
fidelitytitleoregon.com
glende-pflanzenparadies.de
fbmagazine.ru
premiumweb.com.ua:443
bookingwheel.com
enactusnhlstenden.com
iexpert99.com
globalcompliancenews.com
espaciopolitica.com
fanuli.com.au
rishigangoly.com
denhaagfoodie.nl
nevadaruralhousingstudies.org
piestar.com
georgemuncey.com
mustangmarketinggroup.com
gatlinburgcottage.com
shortysspices.com
ziliak.com
andreaskildegaard.dk
landgoedspica.nl
alene.co
sprintcoach.com
computer-place.de
hostaletdelsindians.es
nykfdyrehospital.dk
clemenfoto.dk
smartercashsystem.com
katherinealy.com
weddingceremonieswithtim.com
masecologicos.com
adaduga.info
theatre-embellie.fr
zaczytana.com
opt4cdi.com
nginx.com
ruggestar.ch
pureelements.nl
acb-gruppe.ch
wribrazil.com
stage-infirmier.fr
abulanov.com
billigeflybilletter.dk
acumenconsultingcompany.com
lovcase.com
walterman.es
ledyoucan.com
brisbaneosteopathic.com.au
dantreranch.com
liveyourheartout.co
diakonie-weitramsdorf-sesslach.de
m2graph.fr
clinic-beethovenstrasse-ag.ch
subyard.com
jobscore.com
onlinetvgroup.com
ced-elec.com
energosbit-rp.ru
catalyseurdetransformation.com
signededenroth.dk
latableacrepes-meaux.fr
fixx-repair.com
bodet150ans.com
kelsigordon.com
jeanmonti.com
skolaprome.eu
elex.is
vapiano.fr
netadultere.fr
arearugcleaningnyc.com
jlgraphisme.fr
cl0nazepamblog.com
dinedrinkdetroit.com
agenceassemble.fr
nexstagefinancial.com
cops4causes.org
annenymus.com
shrinkingplanet.com
yourcosmicbeing.com
alharsunindo.com
powershell.su
chorusconsulting.net
burg-zelem.de
stagefxinc.com
5pointpt.com
mneti.ru
dcc-eu.com
istantidigitali.com
kiraribeaute-nani.com
malzomattalar.com
qrs-international.com
veggienessa.com
chomiksy.net
endlessrealms.net
jayfurnitureco.com
mercadodelrio.com
cap29010.it
altocontatto.net
hameghlim.com
nvisionsigns.com
werkzeugtrolley.net
skyboundnutrition.co.uk
jobstomoveamerica.org
heuvelland-oaze.nl
onlinemarketingsurgery.co.uk
unislaw-narty.pl
adterium.com
morgansconsult.com
jameswilliamspainting.com
metcalfe.ca
cxcompany.com
tramadolhealth.com
alltagsrassismus-entknoten.de
edvestors.org
drbrianhweeks.com
slotenmakerszwijndrecht.nl
hawthornsretirement.co.uk
martinipstudios.com
fskhjalmar.se
bulyginnikitav.000webhostapp.com
mariamalmahdi.com
lgiwines.com
drbenveniste.com
ravage-webzine.nl
ludoil.it
ahgarage.com
ivancacu.com
beandrivingschool.com.au
inewsstar.com
nationnewsroom.com
campinglaforetdetesse.com
livedeveloper.com
taulunkartano.fi
bcmets.info
carolynfriedlander.com
mediabolmong.com
kombi-dress.com
ramirezprono.com
fotoeditores.com
devplus.be
ncn.nl
noda.com.ua
cac2040.com
galatee-couture.com
kookooo.com
elitkeramika-shop.com.ua
b3b.ch
cp-bap.de
spacebel.be
racefietsenblog.nl
housesofwa.com
mondolandscapes.com
hoteltantra.com
baptistdistinctives.org
perceptdecor.com
ninjaki.com
theintellect.edu.pk
kristianboennelykke.dk
stralsund-ansichten.de
1deals.com
brunoimmobilier.com
volta.plus
the3-week-diet.net
tbalp.co.uk
paradigmlandscape.com
teethinadaydentalimplants.com
scotlandsroute66.co.uk
greatofficespaces.net
thegetawaycollective.com
campusescalade.com
sbit.ag
smartspeak.com
jacquesgarcianoto.com
egpu.fr
operativadigital.com
wrinstitute.org
dayenne-styling.nl
glas-kuck.de
karmeliterviertel.com
finsahome.co.uk
delegationhub.com
agencewho-aixenprovence.fr
jefersonalessandro.com
pinkxgayvideoawards.com
fann.ru
hotelturbo.de
buzzneakers.com
mediogiro.com.ar
rivermusic.nl
jlwilsonbooks.com
zuerich-umzug.ch
silkeight.com
biketruck.de
johnkoen.com
scholarquotes.com
forumsittard.nl
fascaonline.com
andermattswisswatches.ch
spartamovers.com
jag.me
stathmoulis.gr
yuanshenghotel.com
golfclublandgoednieuwkerk.nl
atma.nl
guohedd.com
fsbforsale.com
pourlabretagne.bzh
arthakapitalforvaltning.dk
ronaldhendriks.nl
whoopingcrane.com
cardsandloyalty.com
animation-pro.co.uk
rtc24.com
endstarvation.com
rubyaudiology.com
kenmccallum.com
innersurrection.com
fotoslubna.com
ultimatelifesource.com
martha-frets-ceramics.nl
logosindustries.com
juergenblaetz.de
breakluckrecords.com
uncensoredhentaigif.com
datatri.be
framemyballs.com
koncept-m.ru
physio-lang.de
jax-interim-and-projectmanagement.com
photonag.com
gta-jjb.fr
innervisions-id.com
smartmind.net
factorywizuk.com
brownswoodblog.com
bourchier.org
proffteplo.com
mazzaropi.com.br
springfieldplumbermo.com
apogeeconseils.fr
schlagbohrmaschinetests.com
rarefoods.ro
riffenmattgarage.ch
baita.ac
towelroot.co
secrets-clubs.co.uk
yvesdoin-aquarelles.fr
initconf.com
eyedoctordallas.com
magnetvisual.com
rvside.com
thestudio.academy
solutionshosting.co.uk
envomask.com
ijsselbeton.nl
babysitting-hk.helpergo.co
smarttourism.academy
topvijesti.net
ketomealprep.academy
altitudeboise.com
customroasts.com
legundschiess.de
goodherbalhealth.com
midwestschool.org
astrographic.com
jakubrybak.com
dibli.store
bundan.com
encounter-p.net
witraz.pl
redctei.co
haus-landliebe.de
cc-experts.de
bilius.dk
lexced.com
placermonticello.com
krishnabrawijaya.com
vitoriaecoturismo.com.br
triavlete.com
successcolony.com.ng
geitoniatonaggelon.gr
fazagostar.co
hostastay.com
metallbau-hartmann.eu
haard-totaal.nl
groovedealers.ru
bluetenreich-brilon.de
bjornvanvulpen.nl
testitjavertailut.net
malevannye.ru
letterscan.de
myplaywin3.com
90nguyentuan.com
sytzedevries.com
interlinkone.com
k-zubki.ru
mahikuchen.com
texanscan.org
worldproskitour.com
lagschools.ng
foerderverein-vatterschule.de
bluemarinefoundation.com
jaaphoekzema.nl
sharonalbrightdds.com
atrgroup.it
spirello.nl
2020hindsight.info
valiant-voice.com
sellthewrightway.com
eksperdanismanlik.com
hawaiisteelbuilding.com
coachpreneuracademy.com
adabible.org
turing.academy
scietech.academy
citydogslife.com
berdonllp.com
hinotruckwreckers.com.au
vitormmcosta.com
keuken-prijs.nl
santastoy.store
laaisterplakky.nl
stressreliefadvice.com
blucamp.com
mind2muscle.nl
vedsegaard.dk
eos-horlogerie.com
ownidentity.com
triplettabordeaux.fr
bg.szczecin.pl
ceocenters.com
handyman-silkeborg.dk
cainlaw-okc.com
deziplan.ru
lidkopingsnytt.nu
fitnessblenderstory.com
buonabitare.com
michaelfiegel.com
ebible.co
baumfinancialservices.com
kryptos72.com
apmollerpension.com
jandhpest.com
rolleepollee.com
wirmuessenreden.com
angelsmirrorus.com
apiarista.de
c-sprop.com
qandmmusiccenter.com
metriplica.academy
belinda.af
lassocrm.com
liepertgrafikweb.at
motocrosshideout.com
digitale-elite.de
vipcarrental.ae
ayudaespiritualtamara.com
kosten-vochtbestrijding.be
alwaysdc.com
rokthetalk.com
leopoldineroux.com
mariajosediazdemera.com
wineandgo.hu
betterce.com
goodboyscustom.com
kausette.com
oncarrot.com
phukienbepthanhdat.com
9nar.com
omnicademy.com
jimprattmediations.com
pro-gamer.pl
paprikapod.com
marcandy.com
agriturismocastagneto.it
hnkns.com
maryairbnb.wordpress.com
littlesaints.academy
kickittickets.com
goeppinger-teppichreinigung.de
neonodi.be
circuit-diagramz.com
atelierkomon.com
sambaglow.com
richardiv.com
fluzfluzrewards.com
oththukaruva.com
tieronechic.com
der-stempelking.de
domilivefurniture.com
gsconcretecoatings.com
airserviceunlimited.com
global-migrate.com
blueridgeheritage.com
rapid5kloan.org
ufovidmag.com
mamajenedesigns.com
eastgrinsteadwingchun.com
protoplay.ca
theboardroomafrica.com
solidhosting.nl
block-optic.com
claudiakilian.de
angelika-schwarz.com
alisodentalcare.com
cmeow.com
primemarineengineering.com
arabianmice.com
mursall.de
supercarhire.co.uk
premier-iowa.com
lifeinbreaths.com
peppergreenfarmcatering.com.au
hensleymarketing.com
iron-mine.ru
dogsunlimitedguide.com
dreamvoiceclub.org
futurenetworking.com
designimage.ae
internalresults.com
toranjtuition.org
zdrowieszczecin.pl
holocine.de
angeleyezstripclub.com
funworx.de
basindentistry.com
kamin-somnium.de
daveystownhouse.com
techybash.com
devus.de
web865.com
mrkluttz.com
advesa.com
floweringsun.org
mesajjongeren.nl
matteoruzzaofficial.com
trainiumacademy.com
agrifarm.dk
michal-s.co.il
beauty-traveller.com
markseymourphotography.co.uk
four-ways.com
terraflair.de
christianscholz.de
boomerslivinglively.com
p-ride.live
boyfriendsgoal.site
the-cupboard.co.uk
kemtron.fr
aheadloftladders.co.uk
jalkapuu.net
janellrardon.com
hom-frisor.dk
bychowo.pl
rizplakatjaya.com
uci-france.fr
thehovecounsellingpractice.co.uk
happylublog.wordpress.com
hekecrm.com
traitware.com
imajyuku-sozoku.com
zinnystar.com
ncjc.ca
thepixelfairy.com
wyreforest.net
rossomattonecase.it
advanced-removals.co.uk
liverpoolabudhabi.ae
hm-com.com
sjtpo.org
stabilisateur.fr
unexplored.gr
wordpress.idium.no
webforsites.com
stitch-n-bitch.com
pixelhealth.net
onesynergyinternational.com
lovetzuchia.com
gavelmasters.com
satoblog.org
reygroup.pt
cincinnatiphotocompany.org
bubbalucious.com
watchsale.biz
production-stills.co.uk
glennverschueren.be
rhino-turf.com
rozmata.com
k-v-f.de
dentalcircle.com
davedavisphotos.com
axisoflove.org:443
salonlamar.nl
globalskills.pt
arazi.eus
creohn.de
dinecorp.com
dnqa.co.uk
finnergo.eu
klapanvent.ru
mollymccarthydesign.com
gazelle-du-web.com
oexebusiness.com
zumrutkuyutemel.com
theater-lueneburg.de
citiscapes-art.com
poems-for-the-soul.ch
nicksrock.com
opticahubertruiz.com
christopherhannan.com
explora.nl
loparnille.se
pazarspor.org.tr
jonnyhooley.com
xn--billigafrgpatroner-stb.se
electricianul.com
ilovefullcircle.com
keyboardjournal.com
distrifresh.com
muni.pe
artcase.pl
frimec-international.es
moira-cristescu.com
tchernia-conseil.fr
reizenmetkinderen.be
antesacademy.it
eshop.design
nourella.com
allinonecampaign.com
lesyeuxbleus.net
alaskaremote.com
artvark.nl
speiserei-hannover.de
the-beauty-guides.com
evsynthacademy.org
bmw-i-pure-impulse.com
slotspinner.com
brighthillgroup.com
donau-guides.eu
dentourage.com
promus.ca
modamarfil.com
colored-shelves.com
aoyama.ac
awag-blog.de
invela.dk
larchwoodmarketing.com
diverfiestas.com.es
casinodepositors.com
deduktia.fi
topautoinsurers.net
strauchs-wanderlust.info
condormobile.fr
jobkiwi.com.ng
sochi-okna23.ru
efficiencyconsulting.es
fi-institutionalfunds.com
kryddersnapsen.dk
kerstliedjeszingen.nl
leijstrom.com
11.in.ua
cotton-avenue.co.il
rs-danmark.dk
qwikcoach.com
rhino-storage.co.uk
simpleitsolutions.ch
geoweb.software
itheroes.dk
avtoboss163.ru:443
dierenambulancealkmaar.nl
medicalsupportco.com
mieleshopping.it
pinthelook.com
the5thquestion.com
tages-geldvergleich.de
innovationgames-brabant.nl
lattalvor.com
saberconcrete.com
yourhappyevents.fr
queertube.net
graygreenbiomedservices.com
fla.se
sunsolutions.es
metroton.ru
sycamoregreenapts.com
charlottelhanna.com
nutriwell.com.sg
shortsalemap.com
imagine-entertainment.com
go.labibini.ch
kdbrh.com
teutoradio.de
bajova.sk
pubcon.com
slideevents.be
soundseeing.net
silverbird.dk
aidanpublishing.co.uk
relevantonline.eu
drvoip.com
greenrider.nl
banksrl.co.za
frameshift.it
banukumbak.com
studionumerik.fr
stanleyqualitysystems.com
professionetata.com
bodymindchallenger.com
dentallabor-luenen.de
schroederschoembs.com
nauticmarine.dk
trevi-vl.ru
die-immo-agentur.de
paardcentraal.nl
cascinarosa33.it
ilveshistoria.com
dennisverschuur.com
annida.it
catchup-mag.com
thisprettyhair.com
agendatwentytwenty.com
aslog.fr
bratek-immobilien.de
auberives-sur-vareze.fr
palmecophilippines.com
cymru.futbol
from02pro.com
yournextshoes.com
nrgvalue.com
nuohous.com
insane.agency
kuriero.pro
bonitabeachassociation.com
advancedeyecare.com
margaretmcshane.com
skoczynski.eu
makingmillionaires.net
naukaip.ru
bruut.online
cssp-mediation.org
benchbiz.com
kompresory-opravy.com
wallflowersandrakes.com
therapybusinessacademy.com
biblica.com
putzen-reinigen.com
patassociation.com
bohrlochversicherung.info
carmel-york.com
karelinjames.com
motocrossplace.co.uk
catering.com
alabamaroofingllc.com
billscars.net
nepressurecleaning.com
carsten.sparen-it.de
molinum.pt
flossmoordental.com
direitapernambuco.com
gardenpartner.pl
universelle.fr
precisetemp.com
iactechnologies.net
phoenixcrane.com
bagaholics.in
imaginekithomes.co.nz
tanatek.com
neolaiamedispa.com
bertbutter.nl
brinkdoepke.eu
optigas.com
animalfood-online.de
grancanariaregional.com
mayprogulka.ru
lyricalduniya.com
rsidesigns.com
xtensifi.com
janmorgenstern.com
xn--80abehgab4ak0ddz.xn--p1ai
airvapourbarrier.com
penumbuhrambutkeiskei.com
trivselsguide.dk
randyabrown.com
ocduiblog.com
richardkershawwines.co.za
photographycreativity.co.uk
sber-biznes.com
andrealuchesi.it
acibademmobil.com.tr
happycatering.de
vdolg24.online
brannbornfastigheter.se
speakaudible.com
cormanmarketing.com
perfectgrin.com
bcabattoirs.org
levencovka.ru
utilisacteur.fr
barbaramcfadyenjewelry.com
crestgood.com
asiaartgallery.jp
girlish.ae
internestdigital.com
sppdstats.com
palema.gr
denverwynkoopdentist.com
lisa-poncon.fr
smartworkplaza.com
renderbox.ch
ntinasfiloxenia.gr
agora-collectivites.com
mariannelemenestrel.com
alexwenzel.de
soncini.ch
factoriareloj.com
mrcar.nl
rentingwell.com
bumbipdeco.site
luvbec.com
loysonbryan.com
breathebettertolivebetter.com
mjk.digital
saboboxtel.uk
hiddensee-buhne11.de
azloans.com
easydental.ae
etgdogz.de
peninggibadan.co.id
aceroprime.com
sachainchiuk.com
bescomedical.de
amyandzac.com
parksideseniorliving.net
azerbaycanas.com
akwaba-safaris.com
pankiss.ru
muller.nl
richardmaybury.co.uk
pajagus.fr
baikalflot.ru
hostingbangladesh.net
mike.matthies.de
transifer.fr
dr-vita.de
schluesseldienste-hannover.de
auto-opel.ro
bellesiniacademy.org
purepreprod4.com
jdscenter.com
ykobbqchicken.ca
ox-home.com
amco.net.au
sveneulberg.de
cookinn.nl
epicjapanart.com
ingresosextras.online
domaine-des-pothiers.com
thegrinningmanmusical.com
alnectus.com
chatterchatterchatter.com
sololibrerie.it
forskolinslimeffect.net
pays-saint-flour.fr
triplettagaite.fr
grupoexin10.com
alattekniksipil.com
enews-qca.com
blavait.fr
5thactors.com
parentsandkids.com
nalliasmali.net
aktivfriskcenter.se
prodentalblue.com
tastevirginia.com
avis.mantova.it
hutchstyle.co.uk
skyscanner.ro
lunoluno.com
schulz-moelln.de
mrmac.com
eventosvirtualesexitosos.com
greeneyetattoo.com
craftingalegacy.com
kellengatton.com
parisschool.ru
hepishopping.com
verbouwingsdouche.nl
voetbalhoogeveen.nl
bd2fly.com
harleystreetspineclinic.com
tetameble.pl
amorbellezaysalud.com
curtsdiscountguns.com
gaearoyals.com
rechtenplicht.be
renehartman.nl
tutvracks.com
mbuildinghomes.com
sweetz.fr
mangimirossana.it
bakingismyyoga.com
johnstonmingmanning.com
palmenhaus-erfurt.de
hvitfeldt.dk
avisioninthedesert.com
tesisatonarim.com
campusce.com
ygallerysalonsoho.com:443
natturestaurante.com.br
linearete.com
fysiotherapierijnmond.nl
akcadagofis.com
augen-praxisklinik-rostock.de
fire-space.com
wasnederland.nl
cesep2019.com
linkbuilding.life
jollity.hu
bluelakevision.com
ronielyn.com
csaballoons.com
bringmehope.org
raeoflightmusic.com
outstandingminialbums.com
tecleados.com
goddardleadership.org
suitesartemis.gr
chatberlin.de
molade.nl
pisofare.co
gratiocafeblog.wordpress.com
bridalcave.com
concontactodirecto.com
epsondriversforwindows.com
collegetennis.info
forextimes.ru
singletonfinancial.com
g2mediainc.com
billyoart.com
louiedager.com
thenalpa.com
advance-refle.com
grafikstudio-visuell.de
jmmartinezilustrador.com
gurutechnologies.net
descargandoprogramas.com
tellthebell.website
gosouldeep.com
frankgoll.com
jglconsultancy.com
maxcube24.com.ua
hypogenforensic.com
laylavalentine.com
nepal-pictures.com
nxtstg.org
rattanwarehouse.co.uk
ciga-france.fr
buffdaddyblog.com
afbudsrejserallinclusive.dk
a-zpaperwork.eu
lashandbrowenvy.com
lmmont.sk
bayshoreelite.com
johnsonweekly.com
wg-heiligenstadt.de
profibersan.com
plbinsurance.com
eurethicsport.eu
janasfokus.com
aquacheck.co.za
alcye.com
leloupblanc.gr
oportowebdesign.com
duthler.nl
voice2biz.com
edrickennedymacfoy.com
zorgboerderijravensbosch.nl
magrinya.net
fta-media.com
reputation-medical.online
boloria.de
subquercy.fr
birthplacemag.com
napisat-pismo-gubernatoru.ru:443
leatherjees.com
t3brothers.com
pedmanson.com
mundo-pieces-auto.fr
selected-minds.de
chinowarehousespace.com
hartofurniture.com
pxsrl.it
mgimalta.com
irizar.com
redpebblephotography.com
livelai.com
ikzoekgod.be
osn.ro
adedesign.com
expohomes.com
oraweb.net
latteswithleslie.com
lumturo.academy
pharmeko-group.com
sealgrinderpt.com
focuskontur.com
limmortelyouth.com
cmascd.com
switch-made.com
pokemonturkiye.com
elliemaccreative.wordpress.com
biodentify.ai
activeterroristwarningcompany.com
aciscomputers.com
newonestop.com
skidpiping.de
so-sage.fr
omegamarbella.com
mazift.dk
ddmgen.com
log-barn.co.uk
bendel-partner.de
comoserescritor.com
rentsportsequip.com
projektparkiet.pl
scentedlair.com
o2o-academy.com
letsstopsmoking.co.uk
tothebackofthemoon.com
mslp.org
eafx.pro
marmarabasin.com
ikadomus.com
mensemetgesigte.co.za
druktemakersheerenveen.nl
aberdeenartwalk.org
gbk-tp1.de
mindfuelers.com
heimdalbygg.no
lapponiasafaris.com
vvego.com
polynine.com
quitescorting.com
thiagoperez.com
min-virksomhed.dk
xn--ziinoapte-6ld.ro
julielusktherapy.com
directique.com
awaisghauri.com
patriotcleaning.net
o90.dk
tweedekansenloket.nl
kafkacare.com
nbva.co.uk
cuadc.org
cleanroomequipment.ie
xn--80addfr4ahr.dp.ua
look.academy
eatyoveges.com
cyberpromote.de
saint-malo-developpement.fr
stoneridgemontessori.com
entdoctor-durban.com
line-x.co.uk
humanviruses.org
buerocenter-butzbach-werbemittel.de
circlecitydj.com
radishallgood.com
parseport.com
narca.net
luvinsburger.fr
pansionatblago.ru
ya-elka.ru
chris-anne.com
licensed-public-adjuster.com
profiz.com
wademurray.com
stringnosis.academy
rino-gmbh.com
tilldeeke.de
monstarrsoccer.com
suonenjoen.fi
charlesfrancis.photos
dmlcpa.com
kvetymichalovce.sk
bavovrienden.nl
tzn.nu
tradenavigator.ch
kartuindonesia.com
skinkeeper.li
manzel.tn
corporacionrr.com
mac-computer-support-hamburg.de
husetsanitas.dk
furland.ru
levelseven.be
3daywebs.com
albcleaner.fr
mediahub.co.nz
oro.ae
ideamode.com
awaitspain.com
centuryvisionglobal.com
welovecustomers.fr
matthieupetel.fr
justaroundthecornerpetsit.com
affligemsehondenschool.be
docarefoundation.org
craftstone.co.nz
lookandseen.com
galaniuklaw.com
memphishealthandwellness.com
miscbo.it
alpesiberie.com
victorvictoria.com
myfbateam.com
pilotgreen.com
amelielecompte.wordpress.com
unboxtherapy.site
skooppi.fi
otpusk.zp.ua
pvandambv.nl
belofloripa.be
leansupremegarcinia.net
dieetuniversiteit.nl
drnelsonpediatrics.com
chainofhopeeurope.eu
test-teleachat.fr
anchelor.com
almamidwifery.com
lollachiro.com
business-basic.de
khtrx.com
indiebizadvocates.org
n-newmedia.de
111firstdelray.com
xrresources.com
sshomme.com
achetrabalhos.com
zwemofficial.nl
limounie.com
publicompserver.de
orchardbrickwork.com
prometeyagro.com.ua
kroophold-sjaelland.dk
teamsegeln.ch
broccolisoep.nl
oscommunity.de
craftron.com
-
net
true
-
pid
65
-
prc
mspub
dbeng50
isqlplussvc
powerpnt
steam
mydesktopqos
winword
msaccess
tbirdconfig
ocssd
agntsvc
synctime
sqbcoreservice
wordpad
visio
sql
mydesktopservice
firefox
xfssvccon
thebat
encsvc
dbsnmp
ocautoupds
onenote
outlook
infopath
thunderbird
oracle
ocomm
excel
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.cc/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
2906
-
svc
svc$
sql
sophos
veeam
memtas
backup
vss
mepocs
Signatures
-
Sodinokibi family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f849f1a918db29de3d9b6973fdcf17f6_JaffaCakes118
Files
-
f849f1a918db29de3d9b6973fdcf17f6_JaffaCakes118.dll windows:5 windows x86 arch:x86
c4c29c7e6a6897be412c7fedfcca8fe4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
SetErrorMode
CreateThread
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t6np6 Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ