Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Hive 2021-10-26 13:36
Hello and welcome to Hive.
How may I help you?

Victim 2021-10-26 13:38
we have some files crypted and we want to decrypt them

Victim 2021-10-26 14:20
anybody there?

Hive 2021-10-26 17:15
To decrypt your files you have to pay $3,500,000 in Bitcoin. The price is not a subject to discuss.

Victim 2021-10-26 18:03
sorry, are we talking about 3,5K or 3,5M $

Victim 2021-10-26 18:04
in the first case, how should we do the payment and when will we be able to decrypt files?

Hive 2021-10-26 18:06
It's clearly the price is $3.5M

Hive 2021-10-26 18:07
We also have exfiltrated files which will be disclosed in case of refusing to pay.

Hive 2021-10-27 18:38
To convince you to pay we can make calls to your partners to notify them about the incident.

Victim 2021-10-27 18:46
No need for it. We've been checking with Finance your figures and despite willing to pay, we cannot afford the requested amount. We are a roughly over 77M $ yearly revenue company as you can check at official business directory (https://www.dnb.com/business-directory/company-profiles.[redacted].html). That amount is far away from our ability to comply with your demands.

Hive 2021-10-27 19:11
The price is not a subject to discuss.

Hive 2021-10-27 19:16
We performed files analysis. The impact of disclosure and undecryptable files will cost you few times more then $3.5M.
To prove that we have exfiltrated files I give you a sample archive.

https://privatlab.com/s/v/NQqR2jo2B7SyQeBnp5y4

Victim 2021-10-27 19:17
I'm not trying to negotiate. It's just you are considering we are about 500% bigger than we are. It's just a matter of being realistic.

Hive 2021-10-27 19:18
I'll fix the number at the company's profile but it will not change anything.

Hive 2021-11-01 11:15
We will not wait forever. You have to decide.

Hive 2021-11-02 14:40
Let me explain to you something.
There is no other way to decrypt files other then to purchase the decryption software. The attempts to use something different then original software MAY cause irreversible damage. Your files will be unable to decrypt!

Victim 2021-11-04 11:22
We perfectly understand you but, as told before, we have a significantly lower size than you have considered. Your demands are far from feasible for us (no such cash available).
As I told you, we are not trying to negotiate but if we want to reach something feasible for both parties, we need to get close to realistic capabilities.
Are you open to discuss?

Hive 2021-11-04 20:02
I offer you $2,500,000 and it's valid until the end of the weekend.

Victim 2021-11-05 14:35
Still high, but anyway I'll pass your offer to management. Anyway, is there any proof of trust that the decryption software will fully solve the issue?

Victim 2021-11-05 14:47
By the way, we don't have Bitcoin. How shall we proceed?

Hive 2021-11-05 16:29
To prove the decryption software works you may upload few encrypted files and a key related to them. It usually locates at C:\*.key.* or at root of a shared folder

Hive 2021-11-05 16:35
You may purchase Bitcoin here - https://www.kraken.com/

Just create a new business account and make SEPA-payment.
After registration and SEPA-payment you should immediately contact to Kraken Support and raise the withdrawal limit to $2.5M per 1 BTC transaction.

Victim 2021-11-05 16:57
there are several files like this one

Hive 2021-11-05 19:03
Yes, and then upload encrypted files which contain 4igKANBkvldLbBKaHpLIOSo-[redacted]*.[redacted]

Victim 2021-11-05 20:51
OK OK, now I undertand

Victim 2021-11-05 21:00
I will upload a single folder with different file types. Is it OK?

Victim 2021-11-05 21:02
my colleagues are warning me about some sort of verifications asked by Kraken registration. I will be updating status.

Hive 2021-11-05 21:03
Upload few encrypted files with a key. You don't have to upload full folder.

Victim 2021-11-05 21:29
there you go

Hive 2021-11-05 21:35
I have uploaded one file and others, I see they contain important info. I can mask some data in it^

Passphrase : XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
Vault : Serverdom
Machine : SERVERDOM

Hive 2021-11-05 21:38
Name Type Data Timestamp
_msdcs
_sites
_tcp
_udp
DomainDnsZones
ForestDnsZones
(same as parent folder) Host (A) 192.168.YYY.XXX 03/07/2019 19:00:00
(same as parent folder) Host (A) 192.168.YYY.XXX 01/09/2019 16:00:00
[redacted] Host (A) 192.168.YYY.XXX 20/06/2019 14:00:00
[redacted] Host (A) 192.168.YYY.XXX 25/08/2019 12:00:00
[redacted] Host (A) 192.168.YYY.XXX 25/06/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 25/06/2019 11:00:00
[redacted] Host (A) 192.168.YYY.XXX 25/06/2019 12:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/08/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 13/08/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 28/08/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 28/08/2019 10:00:00
Backups Host (A) 192.168.YYY.XXX static
Backups2 Host (A) 192.168.YYY.XXX 29/08/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 12/08/2019 15:00:00
[redacted] Host (A) 192.168.YYY.XXX 12/08/2019 15:00:00
[redacted] Host (A) 192.168.YYY.XXX 08/08/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 08/08/2019 15:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/08/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 30/08/2019 11:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 30/08/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 18/06/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 31/08/2019 19:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 08/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 13:00:00
[redacted] Host (A) 192.168.YYY.XXX 26/08/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 28/08/2019 13:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 29/08/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 08/08/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 27/08/2019 15:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 01/09/2019 15:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 15:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 0:00:00
[redacted] Host (A) 192.168.YYY.XXX 01/09/2019 11:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 31/08/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 23/08/2019 15:00:00
[redacted] Host (A) 192.168.YYY.XXX static
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 7:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 28/08/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 0:00:00
[redacted] Host (A) 192.168.YYY.XXX 03/09/2019 14:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 01/08/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 7:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 28/08/2019 7:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 28/08/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 22/08/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 28/08/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 29/08/2019 3:00:00
[redacted] Host (A) 192.168.YYY.XXX 08/09/2019 3:00:00
Gestion Host (A) 192.168.YYY.XXX 28/08/2019 8:00:00
[redacted] Host (A) 10.0.0.11 static
[redacted] Host (A) 10.0.0.12 static
[redacted] Host (A) 10.0.0.13 static
[redacted] Host (A) 192.168.YYY.XXX 26/08/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 23/08/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 14:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 28/08/2019 15:00:00
[redacted] Host (A) 192.168.YYY.XXX 26/08/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 03/09/2019 11:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 7:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
LAPTOP-[redacted] Host (A) 192.168.YYY.XXX 04/09/2019 13:00:00
LAPTOP-[redacted] Host (A) 192.168.YYY.XXX 04/09/2019 13:00:00
[redacted] Host (A) 192.168.YYY.XXX 03/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 04/09/2019 3:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX static
[redacted] Host (A) 192.168.YYY.XXX static
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 16:00:00
[redacted] Host (A) 192.168.YYY.XXX 27/08/2019 19:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 17:00:00
[redacted] Host (A) 192.168.YYY.XXX 26/08/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 30/08/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 26/08/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 07/09/2019 22:00:00
[redacted] Host (A) 192.168.YYY.XXX 13/08/2019 7:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/08/2019 14:00:00
[redacted] Host (A) 192.168.YYY.XXX 26/07/2019 13:00:00
[redacted] Host (A) 192.168.YYY.XXX 24/07/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 17:00:00
[redacted] Host (A) 192.168.YYY.XXX 01/08/2019 14:00:00
[redacted] Host (A) 192.168.YYY.XXX 07/08/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 16/07/2019 13:00:00
[redacted] Host (A) 192.168.YYY.XXX 16/07/2019 13:00:00
[redacted] Host (A) 192.168.YYY.XXX 07/09/2019 15:00:00
[redacted] Host (A) 192.168.YYY.XXX 24/07/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 03/07/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 17/07/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 22/08/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 29/08/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 26/08/2019 17:00:00
[redacted] Host (A) 192.168.YYY.XXX 04/09/2019 14:00:00
[redacted] Host (A) 192.168.YYY.XXX 31/08/2019 10:00:00
[redacted]SRV Host (A) 192.168.YYY.XXX 31/08/2019 11:00:00
[redacted] Host (A) 192.168.YYY.XXX 26/08/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 01/09/2019 15:00:00
[redacted] Host (A) 192.168.YYY.XXX 30/08/2019 16:00:00
[redacted] Host (A) 192.168.YYY.XXX 27/08/2019 20:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 01/09/2019 0:00:00
[redacted] Host (A) 192.168.YYY.XXX 29/08/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 7:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 31/08/2019 22:00:00
[redacted]SRV Host (A) 192.168.YYY.XXX 08/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/08/2019 14:00:00
NAS-2 Host (A) 192.168.YYY.XXX static
[redacted] Host (A) 192.168.YYY.XXX 04/07/2019 11:00:00
[redacted] Host (A) 192.168.YYY.XXX 28/08/2019 11:00:00
[redacted] Host (A) 192.168.YYY.XXX 28/08/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 01/09/2019 0:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 11:00:00
[redacted] Host (A) 192.168.YYY.XXX 28/08/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 03/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 26/08/2019 7:00:00
[redacted] Host (A) 192.168.YYY.XXX 04/09/2019 11:00:00
[redacted] Host (A) 192.168.YYY.XXX 27/08/2019 13:00:00
[redacted] Host (A) 192.168.YYY.XXX 27/08/2019 13:00:00
[redacted] Host (A) 192.168.YYY.XXX 04/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 03/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 27/08/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 12:00:00
[redacted] Host (A) 192.168.YYY.XXX 27/08/2019 3:00:00
[redacted] Host (A) 192.168.YYY.XXX 30/08/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 12:00:00
[redacted] Host (A) 192.168.YYY.XXX 31/08/2019 2:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 13:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 13:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 11:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 11:00:00
PRESTA[redacted] Host (A) 192.168.YYY.XXX 04/09/2019 19:00:00
[redacted] Host (A) 192.168.YYY.XXX 28/08/2019 7:00:00
[redacted]-HP Host (A) 192.168.YYY.XXX 02/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 03/09/2019 12:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 15:00:00
[redacted] Host (A) 192.168.YYY.XXX 30/08/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 08/09/2019 5:00:00
[redacted] Host (A) 192.168.YYY.XXX 04/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 01/09/2019 12:00:00
Server[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 8:00:00
SERVER[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 10:00:00
Server[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 13:00:00
Server[redacted] Host (A) 192.168.YYY.XXX 31/08/2019 8:00:00
SERVER[redacted] Host (A) 192.168.YYY.XXX 28/08/2019 11:00:00
serverdom Host (A) 192.168.YYY.XXX static
Server[redacted] Host (A) 192.168.YYY.XXX 25/08/2019 8:00:00
Server[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 8:00:00
ServerEditorial Host (A) 192.168.YYY.XXX 05/09/2019 13:00:00
Server[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 8:00:00
Server[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 8:00:00
servergit Host (A) 192.168.YYY.XXX static
ServerHCM Host (A) 192.168.YYY.XXX 02/09/2019 8:00:00
Server[redacted] Host (A) 192.168.YYY.XXX 11/08/2019 8:00:00
serverjava Host (A) 192.168.YYY.XXX static
SERVERMD Host (A) 192.168.YYY.XXX 08/09/2019 8:00:00
ServerMonPrint Host (A) 192.168.YYY.XXX 03/09/2019 8:00:00
serverpc Host (A) 192.168.YYY.XXX static
serverphp Host (A) 192.168.YYY.XXX static
serverrails Host (A) 192.168.YYY.XXX static
ServerRDP Host (A) 192.168.YYY.XXX 25/08/2019 8:00:00
Server[redacted] Host (A) 192.168.YYY.XXX 25/08/2019 9:00:00
SERVERSAP Host (A) 192.168.YYY.XXX 03/09/2019 8:00:00
SERVER[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 11:00:00
SERVER[redacted] Host (A) 192.168.YYY.XXX 30/06/2019 6:00:00
Server[redacted] Host (A) 192.168.YYY.XXX 01/09/2019 8:00:00
SERV[redacted] Host (A) 192.168.YYY.XXX 28/08/2019 10:00:00
Servervpn Host (A) 192.168.YYY.XXX 25/08/2019 15:00:00
serverweb Host (A) 192.168.YYY.XXX static
ServerWebW1Apps Host (A) 192.168.YYY.XXX static
SERVERWSUS Host (A) 192.168.YYY.XXX 26/08/2019 8:00:00
Srv[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 8:00:00
SRV[redacted] Host (A) 192.168.YYY.XXX 07/09/2019 15:00:00
SRV[redacted] Host (A) 192.168.YYY.XXX 26/08/2019 9:00:00
SRV[redacted] Host (A) 192.168.YYY.XXX 25/08/2019 15:00:00
SRV[redacted] Host (A) 192.168.YYY.XXX 26/08/2019 8:00:00
SRV[redacted] Host (A) 192.168.YYY.XXX 07/09/2019 11:00:00
srv[redacted] Host (A) 192.168.YYY.XXX static
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 11:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 11:00:00
[redacted] Host (A) 192.168.YYY.XXX 03/09/2019 8:00:00
[redacted] Host (A) 192.168.YYY.XXX 29/08/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 04/09/2019 3:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 08/09/2019 22:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 7:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 7:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 13:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 13:00:00
[redacted] Host (A) 192.168.YYY.XXX 04/09/2019 14:00:00
[redacted] Host (A) 192.168.YYY.XXX 04/09/2019 14:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 13:00:00
[redacted] Host (A) 192.168.YYY.XXX 05/09/2019 15:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 13:00:00
[redacted] Host (A) 192.168.YYY.XXX 02/09/2019 16:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 12:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 06/09/2019 13:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 9:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 10:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 7:00:00
[redacted] Host (A) 192.168.YYY.XXX 09/09/2019 7:00:00
[redacted]ADMIN01 Host (A) 192.168.YYY.XXX 21/06/2019 9:00:00
WIN-[redacted] IPv6 Host (AAAA) 2002:1400:0122:0000:0000:0000:1400:0122 static
(same as parent folder) Name Server (NS) serverdom02.[redacted].local. static
(same as parent folder) Name Server (NS) serverdom.[redacted].local. static
(same as parent folder) Start of Authority (SOA) [222783], serverdom.[redacted].local., hostmaster.[redacted].net. static

Victim 2021-11-05 21:40
too much masking, isn'tit?

Victim 2021-11-05 21:41
i cannot use them for checking validity

Hive 2021-11-05 21:44
All you need is to see that I have decrypted it. There is nothing to validate more

Victim 2021-11-05 21:44
I understand

Victim 2021-11-05 21:45
well, I'll pass the outcome to management but it doesn't appear to be complete

Victim 2021-11-05 21:45
I'll be back to you

Victim 2021-11-05 21:46
those where config files

Victim 2021-11-05 21:47
the more trivial info available

Hive 2021-11-05 21:55
I will not to disclose you any sensitive files until payment will be made. Select other files if you still do not believe that the decryption software works.

Victim 2021-11-05 22:02
no, it's OK. I'll give that to management and if they trust it I'll keep you posted

Hive 2021-11-08 17:43
I need to hear an update from you today

Victim 2021-11-14 18:52
guys, we finally give up with this shit

Victim 2021-11-14 18:53
Kraken has blocked our registration and funds cannot be moved

Victim 2021-11-14 18:53
it seems to be an impossible process

Hive 2021-11-14 20:48
I'm sure this situation will be resolved

Auteur/autrice

sdgadmin@tux.ovh