Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

victim
Hello, We have a ransomware infection. How do I ㅐ it?

victim
We have a ransomware infection. What should I do?

trinity
hello

trinity
you want to decrypt how many computers?

victim
Three recovery PCs have been identified.

victim
We need three recoveries.

trinity
recovery price 0.5
bitcoin for 1 PC, 3pc=1.5 bitcoin after payment you will receive the
decryption program which will automatically decrypt all files bitcoin
wallet [redacted]

trinity
when can I expect payment from you?

victim
The annual sales are
about 600 million won and the net profit is about 30 million won. The
amount you mentioned is the amount we have to collect over five years.
We could go bankrupt. We want to negotiate. Please save our company.

trinity
we can offer a price for 3pc 1 bitcoin if you pay today

victim
In terms of dollars, $4500,000 is the profit and $25,000 is the net profit.

victim
We don't have any
expenses. We only have $10,000 in our bank account. It's a [redacted]
production company, but there's a lot of outstanding money...

victim
In terms of dollars,
$450,000 is the profit and $25,000 is the net profit. We don't have
any expenses. We only have $10,000 in our bank account. It's a [redacted]
production company, but there's a lot of outstanding money...

trinity
I've spoken to the management we can accept $15,000 for 1 PC. if you pay at once

victim
Please lower it a little bit. We need to get a loan and it's tomorrow weekend. Please.

trinity
$39,000 for 3 PCs final offer we lowered it a little bit like you asked. It's $13,000 for 1 PC.

victim
Thank you so much.
But we have to get loans as I told you. One can be possible, but we need
a lot of time to recover. Can you spend time?

trinity
we are waiting for
payment, 0.61 bitcoin to the above wallet. Do not delay the payment
process as we have given you a big discount my boss can cancel the
contract and discount if you delay.

trinity
bitcoin wallet [redacted]

trinity
0.61 bitcoin

victim
As I said, I don't
have money right now. And it's the weekend... I can't even go to the
bank. Finally, give me a discount and plenty of time.

trinity
All right, we're waiting. but don't drag it out.

trinity
when can I expect a bitcoin transfer from you?

victim
https://www.sendspace.com/file/[redacted]

victim
We are sending you 2 ransomware infected files. Request you to do test recovery.

victim
https://www.sendspace.com/file/[redacted]

victim
I'm sorry, but I'd like to recover the two files contained in the url above.

trinity
ok

trinity

trinity
when will you pay after the test?

trinity
you'll pay right after the test?

trinity
we're waiting to hear back from you and do a test

victim
It's difficult because it's the weekend. I need a day or two.

trinity
https://file.io/[redacted]

trinity
https://prnt.sc/[redacted]

trinity
https://prnt.sc/[redacted]

trinity
we're waiting for payment.

victim
Data recovery has
been validated. I'd like to ask you a favor. I have 13,000 dollars. So I
would like to restore just one server first this weekend. Can you
recover to 0.018 btc first And two days later, I would like to apply
for a loan from the bank on Monday and restore the other two as well.

trinity
we negotiated
$39,000 and gave you a discount. fulfill the terms of the agreement you
can wire us $13,000. to lock in the price and the discount today. While
you take the credit, we'll prepare the decryptors. Don't change the
terms of the agreement.

trinity
[redacted]

trinity
or we'll refund the original price 0.5 bitcoin per 1 pc.

trinity
we keep our word and we ask you to keep yours

victim
It's a little hard to understand. If I send $13,000, will you send me 1 recovery key first?

trinity
if you send $13,000
we'll start preparing three decryptors for you. but we'll only ship
them to you after you've paid the full $39,000. if you want to restore 1
pc, the price will be 0.5 bitcoin please respect the original
agreements

trinity

trinity
show us your intent send $13,000 today

victim
Please wait a moment. I'm borrowing money now.

trinity
ok

victim
[redacted]

victim
0.61 right?

trinity
now39000$ 0.62

trinity

trinity
bitcoin fell

victim
Oh... We are preparing 0.61. Please, 0.61 btc.

trinity
ok pay

victim
Thank you, I think it will take about an hour or two. How long does it take for us to pay the btc and receive the recovery tool?

victim
please check money 0.61BTC

victim
TxID: [redacted]

victim
TxID: [redacted]

victim
Sorry TxID: [redacted]

trinity
send us one file from each of the three computers you want to recover.

victim
https://www.sendspace.com/file/[redacted]

victim
https://www.sendspace.com/file/[redacted]

victim
here file

trinity
ok

trinity
Please stand by. the boss will come and we'll send you three decoders.

victim
ok i'm waiting

trinity
30-40 min

victim
ok Thanks

trinity
before decryption Make copies of important files just in case password :123 run as administrator

trinity
https://file.io/[redacted]

trinity
if you want to decrypt all other files we are ready to make a very big discount. all other PCs for $11,000.

victim
Can you tell me how to use it?

trinity
before decryption Make copies of important files just in case

trinity
unzip

trinity
password :123

trinity
run as administrator

trinity
the program decrypts all files automatically

victim
The file has been recovered, but it's all broken. I'd like to get the recovery tool again.

trinity
https://file.io/[redacted]

trinity
if some files have not been decrypted send us some files

victim
Got into trouble. Program keeps turning off during early morning recovery... How do I fix the problem?

trinity
program shuts down with an error? what do you mean?

victim
I'm not sure. Only cd drive comes out of the black window and the window disappears

trinity
are you running as an administrator? Did the files decrypt?

victim
I decrypt a few and the program just turns off. After that, it just keeps turning off.

trinity
try changing
compatibility mode right-click on the program properties compatibility
mode and check the box compatibility with windows 7/8

victim
https://www.sendspace.com/file/[redacted]

victim
I am sending you the data again from 3 servers. Please send it to the recovery key that has been confirmed to operate normally.

trinity
Хорошо Пожалуйста, подождите.

trinity
okay Please stand by.

trinity
https://file.io/[redacted]

trinity
we had no trouble deciphering it. try copying the files to an external drive and run it on another computer.

trinity
https://file.io/[redacted]

victim
I really appreciate the support. Thank you so much. I'll try again.

trinity
ok

victim
20 to 30 GB of database corruption... is there a fix?

trinity
didn't decrypt the files?

victim
1. It's been restored, but it's damaged. 2. Some materials are not recovered.

trinity
how big is the file?

trinity
https://dropmefiles.com/ download here

trinity
upload the corrupted file here and upload 1 file that was not recovered

trinity
the .trinitylock is gone?

victim
I'll let you know
our problem. 1. Some files cannot be recovered 2. Recovered, but the
file does not open We don't know what to do.

victim
https://dropmefiles.com/[redacted]

victim
I'm sending you 5gb data. Please help.

victim
please help me

trinity
waiting please

victim
ok thanks!!!!!

trinity
there's a different encryption key you didn't pay for this ID.

victim
We sent the data from the same computer. Where can I check the key you are talking about?

victim
We paid for 3 keys,
but we only received 1 recovery key. Shouldn't you give us 2 more keys?
It's only 10% recovery... We can go out of business. Please help

trinity
so there were network drives This is a different key. Let's decrypt all your computers. if you pay the $13,000.

trinity
the first time you sent the files [redacted] [redacted] [redacted] [redacted]

trinity
4 ID we made a decrypter on them.

trinity
now you've sent files with the ID [redacted]

trinity
all your ID
[redacted] [redacted] [redacted]
[redacted] [redacted] [redacted]
[redacted] [redacted]

trinity
you can see the file IDs through the HEX editor, at the end of each file

trinity
you have to pay extra for other IDs $13,000 and we'll decrypt all your IDs. same wallet

victim
https://dropmefiles.com/[redacted]

victim
We don't know how to look at it. Can I test this? And please let me know your ID for this.

trinity
[redacted].zip.trinitylock [redacted]

trinity
[redacted]_LIST_202403.zip.trinitylock [redacted]

trinity
you'll have to pay extra for another ID we'll make a decrypter

victim
Is it the same ID as the 5g we sent you?

victim
[redacted]
For this, I would like to restore only one. Can you give me a quarter
of a dollar And I'd like to test the zip file.

trinity
13000$ 1 ID

trinity
Is it the same ID as the 5g we sent you? YES [redacted]

victim
1id? Aren't you
going to give me all the rest of the keys? We hope to lower the cost
further. Please, I really don't have any money...

trinity
13000$ all ID

trinity
0.22 btc

victim
We really don't have any money, so we have to save it. I can get it tomorrow. Please give me a little discount one more time.

trinity
13000$ for all id

victim
We are borrowing money again. But $13000 is too much. Is $8000 possible? Please

trinity
price 13000$

victim
How many coins is 13000 dollars?

trinity
0.21

trinity
[redacted]

victim
please check money 0.21BTC

trinity
Please stand by.

trinity
send 2 files from each PC you want to recover

victim
https://dropmefiles.com/[redacted] One is the file I sent you

trinity
Please stand by.

victim
https://dropmefiles.com/[redacted]

victim
here all file

trinity
ok

victim
How long will it take?

trinity
waiting boss

trinity
https://dropmefiles.com/[redacted]

trinity
Sorry for delay

trinity
password:123

victim
https://dropmefiles.com/[redacted] We can't even restore it. Please tell me how to do this.

trinity
min

trinity
Please stand by.

victim
How long will it take?

trinity
waiting boss

victim
We'll wait.

trinity
Sorry for delay

victim
Not yet? How much longer do I have to wait... Please help.

trinity
Sorry for delay waiting please

victim
ok

victim
please help me

victim
I can't recover it, what should I do?

trinity
Sorry for delay waiting please

trinity
how many files didn't decrypt?

trinity
how many files didn't decrypt?

victim
90% Unrecoverable

trinity
90 percent of only 1 ID? Did the other IDs decrypt normally?

trinity
?

trinity

Auteur/autrice

sdgadmin@tux.ovh