Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Negotiation Chat — Akira

Negotiation chats provided by Valéry Marchive and Julien Mousqueton.

Chat ID: 20240803

Victim
Hello, we found your note
Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.
Gang
Victim
yes
List.7z // 346 KB
Gang
These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10mb size from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10mb size to our chat and we will upload decrypted copies back.
Gang
Victim
Directory of C:\DATA\[redacted].doc Directory of C:\DATA\[redacted].xlsx Directory of C:\DATA\[redacted].doc Directory of C:\DATA\[redacted].xls Directory of C:\DATA\[redacted].xlsx
files (7).rar // 1.5 MB
Gang
Please review the files. Do you want to test our tool?
Gang
Victim
Can you please decrypt these files for us?
Victim
files.rar // 5.1 MB
The archive is corrupted. Please reupload asap.
Gang
Victim
files.rar // 5.1 MB
Same thing. Could you please upload the files one at a time?
Gang
We are waiting for the files today.
Gang
Victim
[redacted].ini.akira // 82.3 KB
Victim
[redacted].ocx.akira // 830 KB
Victim
[redacted].DAT.akira // 587 KB
Victim
[redacted].VD7.akira // 2.76 MB
Victim
[redacted].mdb.akira // 4.09 MB
decrypted.7z // 4.99 MB
Gang
You can review the files.
Gang
Victim
Thank you for providing us with the decrypted files. How do we go about getting the rest of our files decrypted?
We will give you our decryption tool after payment. You will recover your systems within 24 hours.
Gang
Victim
How much does the decryption tool cost?
1) full decryption assistance $275,000; 2) evidence of data removal $200,000; 3) security report on vulnerabilities we found $35,000; Guarantees are included. The full deal is $400,000.
Gang
Victim
We are interested in the decryption tool and can pay quickly, but we cannot offer what you are asking. What type of discount can you offer to help speed up this process?
Sure. $250,000 if you make payment within 48 hours.
Gang
Victim
$250,000 for the full deal, correct?
$250,000 is the discounted price for the tool. If you want the full deal and are ready to pay within 48 hours, we can accept $350,000.
Gang
Victim
Can you please provide instructions for payment
We accept bitcoins. To gain bitcoins you have to go to any exchange platform as binance or coinbase. Here are the guides: https://www.coinbase.com/how-to-buy/bitcoin https://www.binance.com/en/how-to-buy/bitcoin You also can buy bitcoin from any local brokers. If you withdraw funds from your bank account, then you have to inform the bank that you need this money for investment purposes only. Here is our BTC wallet ID for payment: [redacted]
Gang
Victim
payment was just sent, can you please confirm
unlockers.7z // 2.1 MB
Gang
unlocker.exe -p="path_to_unlock" unlocker.exe -s="C:\paths.txt" where "paths.txt" is a list of paths for the decryptor, each path on a new line ESXi commands 1) chmod +x unlocker 2) ./unlocker -p="/vmfs/volumes"
Gang