Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim [27/04/2023 09:09]
hello?

Victim [27/04/2023 09:14]
Sent the file

Victim [27/04/2023 09:23]
Brother, please give me a discount

BOT [27/04/2023 12:26]
To send funds, use the BTC address specified below: [redacted]. Do not send more than 1 payment to this BTC address

BOT [27/04/2023 12:26]
Discount 20%. Discount expiration date: 2023-05-03

Victim [27/04/2023 12:41]
We are a small enterprise and we cannot afford to spend so much money. Is 5000 USD okay

BOT [27/04/2023 12:44]
To recover your files you need a decryption tool. We are ready to sell it to you at the price indicated on this page

Victim [27/04/2023 12:48]
If I were to make money now, how long would I be able to give me the tools

hiervos [27/04/2023 12:51]
Then we will complete the deal today.

Victim [27/04/2023 12:52]
Can you decrypt the test file so that we can take a look?

BOT [27/04/2023 12:56]
We can make test decrypt for free for not valuable files (xls, doc, bat, txt, jpeg, png, pdf, exe or etc)If you need a test then upload your file on any file host and send me download linkFile hosts: sendspace.com / dropmefiles.com / google.com/drive / file.io / wetransfer.com

Victim [27/04/2023 12:57]
https://dropmefiles.com/[redacted]

Victim [27/04/2023 12:57]
this link

hiervos [27/04/2023 13:07]
wait

Victim [27/04/2023 13:08]
Okay, please hurry up

Victim [27/04/2023 13:29]
We plan to make payment after seeing the decrypted test files. Could you please hurry up? Thank you

hiervos [27/04/2023 13:52]
wait

Victim [27/04/2023 14:38]
Could you please hurry up

hiervos [27/04/2023 14:48]
The technician went out, wait

Victim [27/04/2023 14:49]
Can we complete the transaction tonight? We have been waiting on our end, please make sure to complete the transaction tonight

hiervos [27/04/2023 14:53]
yes

Victim [27/04/2023 16:29]
Hello, has the technology returned? We have been waiting

hiervos [27/04/2023 16:35]
Wait patiently, don't worry, I will tell you after the production is completed

Victim [27/04/2023 16:36]
How long will it take

Victim [27/04/2023 17:04]
We've been waiting all night tonight, please feel free to contact me anytime

hiervos [27/04/2023 17:39]
I know

Support [27/04/2023 18:21]
Sent the file

Support [27/04/2023 18:22]
which amount you are going to pay?

Victim [27/04/2023 18:25]
Didn't you say 20000U?

Support [27/04/2023 18:25]
current price for decryption tool after disocunt is 20000 USD

Support [27/04/2023 18:25]
that's right

Support [27/04/2023 18:25]
just to figure out

Victim [27/04/2023 18:26]
We are
confirming the correctness of the document and will make payment
immediately after confirmation. Please stay online and wait for me

Support [27/04/2023 18:27]
ok

Victim [27/04/2023 18:42]
The customer cannot confirm that it is their own file. Can we decrypt a test file again?

Victim [27/04/2023 18:44]
https://dropmefiles.com/[redacted]

Support [27/04/2023 18:46]
Sent the file

Victim [27/04/2023 18:49]
wait a moment

Victim [27/04/2023 19:07]
Confirm the transfer address, BTC quantity, and we are ready to make payment

Support [27/04/2023 19:12]
$20000 / 0.6874617 btc

Support [27/04/2023 19:12]
btc address [quotes BOT]

Victim [27/04/2023 19:12]
Is this address? [quotes BOT]

Victim [27/04/2023 19:13]
Ok
wait

Victim [27/04/2023 19:18]
Enclosed please find!

Support [27/04/2023 19:18]
yes

Victim [27/04/2023 19:19]
Payment has been made. Please check the records on your end. Thank you

Victim [27/04/2023 19:22]
How long can I receive the decryption tool

Support [27/04/2023 19:40]
in 30 minutes after payment

Support [27/04/2023 19:40]
we are waiting bitcoin network confirmations

Support [27/04/2023 19:41]
when payment will be credited to the account decryptor will be sent

Victim [27/04/2023 19:46]
Okay, I've been waiting

BOT [27/04/2023 19:48]
Received $19987

Victim [27/04/2023 19:49]
hi

Support [27/04/2023 19:52]
Sent the decryptor. To unpack use the password: 123

Victim [29/04/2023 13:09]
Hello, there are two file decryptors that cannot recognize it. Can you help restore it?

Victim [29/04/2023 13:09]
These two files are very important to me

Victim [29/04/2023 13:12]
https://dropmefiles.com/[redacted]

hiervos [29/04/2023 13:21]
Yes, wait a little

Victim [29/04/2023 18:23]
Are you there?

hiervos [29/04/2023 18:51]
yes

Support [29/04/2023 20:46]
Hello

Support [29/04/2023 20:46]
I'm
sorry, unfortunately these two files were not fully encrypted. They are
missing critical recovery information, so I can't decrypt them.

Auteur/autrice

sdgadmin@tux.ovh