Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Negotiation Chat – Mallox

Chat ID: 20230427

Victim Avatar
hello?
[27/04/2023 09:09]
Victim Avatar
Sent the file
[27/04/2023 09:14]
Victim Avatar
Brother, please give me a discount
[27/04/2023 09:23]
To send funds, use the BTC address specified below: [redacted]. Do not send more than 1 payment to this BTC address
[27/04/2023 12:26]
Gang Avatar
Discount 20%. Discount expiration date: 2023-05-03
[27/04/2023 12:26]
Gang Avatar
Victim Avatar
We are a small enterprise and we cannot afford to spend so much money. Is 5000 USD okay
[27/04/2023 12:41]
To recover your files you need a decryption tool. We are ready to sell it to you at the price indicated on this page
[27/04/2023 12:44]
Gang Avatar
Victim Avatar
If I were to make money now, how long would I be able to give me the tools
[27/04/2023 12:48]
Then we will complete the deal today.
[27/04/2023 12:51]
Gang Avatar
Victim Avatar
Can you decrypt the test file so that we can take a look?
[27/04/2023 12:52]
We can make test decrypt for free for not valuable files (xls, doc, bat, txt, jpeg, png, pdf, exe or etc)If you need a test then upload your file on any file host and send me download linkFile hosts: sendspace.com / dropmefiles.com / google.com/drive / file.io / wetransfer.com
[27/04/2023 12:56]
Gang Avatar
Victim Avatar
https://dropmefiles.com/[redacted]
[27/04/2023 12:57]
Victim Avatar
this link
[27/04/2023 12:57]
wait
[27/04/2023 13:07]
Gang Avatar
Victim Avatar
Okay, please hurry up
[27/04/2023 13:08]
Victim Avatar
We plan to make payment after seeing the decrypted test files. Could you please hurry up? Thank you
[27/04/2023 13:29]
wait
[27/04/2023 13:52]
Gang Avatar
Victim Avatar
Could you please hurry up
[27/04/2023 14:38]
The technician went out, wait
[27/04/2023 14:48]
Gang Avatar
Victim Avatar
Can we complete the transaction tonight? We have been waiting on our end, please make sure to complete the transaction tonight
[27/04/2023 14:49]
yes
[27/04/2023 14:53]
Gang Avatar
Victim Avatar
Hello, has the technology returned? We have been waiting
[27/04/2023 16:29]
Wait patiently, don't worry, I will tell you after the production is completed
[27/04/2023 16:35]
Gang Avatar
Victim Avatar
How long will it take
[27/04/2023 16:36]
Victim Avatar
We've been waiting all night tonight, please feel free to contact me anytime
[27/04/2023 17:04]
I know
[27/04/2023 17:39]
Gang Avatar
Sent the file
[27/04/2023 18:21]
Gang Avatar
which amount you are going to pay?
[27/04/2023 18:22]
Gang Avatar
Victim Avatar
Didn't you say 20000U?
[27/04/2023 18:25]
current price for decryption tool after disocunt is 20000 USD
[27/04/2023 18:25]
Gang Avatar
that's right
[27/04/2023 18:25]
Gang Avatar
just to figure out
[27/04/2023 18:25]
Gang Avatar
Victim Avatar
We are confirming the correctness of the document and will make payment immediately after confirmation. Please stay online and wait for me
[27/04/2023 18:26]
ok
[27/04/2023 18:27]
Gang Avatar
Victim Avatar
The customer cannot confirm that it is their own file. Can we decrypt a test file again?
[27/04/2023 18:42]
Victim Avatar
https://dropmefiles.com/[redacted]
[27/04/2023 18:44]
Sent the file
[27/04/2023 18:46]
Gang Avatar
Victim Avatar
wait a moment
[27/04/2023 18:49]
Victim Avatar
Confirm the transfer address, BTC quantity, and we are ready to make payment
[27/04/2023 19:07]
$20000 / 0.6874617 btc
[27/04/2023 19:12]
Gang Avatar
btc address [quotes BOT]
[27/04/2023 19:12]
Gang Avatar
Victim Avatar
Is this address? [quotes BOT]
[27/04/2023 19:12]
Victim Avatar
Ok wait
[27/04/2023 19:13]
Victim Avatar
Enclosed please find!
[27/04/2023 19:18]
yes
[27/04/2023 19:18]
Gang Avatar
Victim Avatar
Payment has been made. Please check the records on your end. Thank you
[27/04/2023 19:19]
Victim Avatar
How long can I receive the decryption tool
[27/04/2023 19:22]
in 30 minutes after payment
[27/04/2023 19:40]
Gang Avatar
we are waiting bitcoin network confirmations
[27/04/2023 19:40]
Gang Avatar
when payment will be credited to the account decryptor will be sent
[27/04/2023 19:41]
Gang Avatar
Victim Avatar
Okay, I've been waiting
[27/04/2023 19:46]
Received $19987
[27/04/2023 19:48]
Gang Avatar
Victim Avatar
hi
[27/04/2023 19:49]
Sent the decryptor. To unpack use the password: 123
[27/04/2023 19:52]
Gang Avatar
Victim Avatar
Hello, there are two file decryptors that cannot recognize it. Can you help restore it?
[29/04/2023 13:09]
Victim Avatar
These two files are very important to me
[29/04/2023 13:09]
Victim Avatar
https://dropmefiles.com/[redacted]
[29/04/2023 13:12]
Yes, wait a little
[29/04/2023 13:21]
Gang Avatar
Victim Avatar
Are you there?
[29/04/2023 18:23]
yes
[29/04/2023 18:51]
Gang Avatar
Hello
[29/04/2023 20:46]
Gang Avatar
I'm sorry, unfortunately these two files were not fully encrypted. They are missing critical recovery information, so I can't decrypt them.
[29/04/2023 20:46]
Gang Avatar