Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Negotiation Chat — Mallox

Negotiation chats provided by Valéry Marchive and Julien Mousqueton.

Chat ID: 20230427

Victim
hello?
[27/04/2023 09:09]
Victim
Sent the file
[27/04/2023 09:14]
Victim
Brother, please give me a discount
[27/04/2023 09:23]
To send funds, use the BTC address specified below: [redacted]. Do not send more than 1 payment to this BTC address
[27/04/2023 12:26]
Gang
Discount 20%. Discount expiration date: 2023-05-03
[27/04/2023 12:26]
Gang
Victim
We are a small enterprise and we cannot afford to spend so much money. Is 5000 USD okay
[27/04/2023 12:41]
To recover your files you need a decryption tool. We are ready to sell it to you at the price indicated on this page
[27/04/2023 12:44]
Gang
Victim
If I were to make money now, how long would I be able to give me the tools
[27/04/2023 12:48]
Then we will complete the deal today.
[27/04/2023 12:51]
Gang
Victim
Can you decrypt the test file so that we can take a look?
[27/04/2023 12:52]
We can make test decrypt for free for not valuable files (xls, doc, bat, txt, jpeg, png, pdf, exe or etc)If you need a test then upload your file on any file host and send me download linkFile hosts: sendspace.com / dropmefiles.com / google.com/drive / file.io / wetransfer.com
[27/04/2023 12:56]
Gang
Victim
https://dropmefiles.com/[redacted]
[27/04/2023 12:57]
Victim
this link
[27/04/2023 12:57]
wait
[27/04/2023 13:07]
Gang
Victim
Okay, please hurry up
[27/04/2023 13:08]
Victim
We plan to make payment after seeing the decrypted test files. Could you please hurry up? Thank you
[27/04/2023 13:29]
wait
[27/04/2023 13:52]
Gang
Victim
Could you please hurry up
[27/04/2023 14:38]
The technician went out, wait
[27/04/2023 14:48]
Gang
Victim
Can we complete the transaction tonight? We have been waiting on our end, please make sure to complete the transaction tonight
[27/04/2023 14:49]
yes
[27/04/2023 14:53]
Gang
Victim
Hello, has the technology returned? We have been waiting
[27/04/2023 16:29]
Wait patiently, don't worry, I will tell you after the production is completed
[27/04/2023 16:35]
Gang
Victim
How long will it take
[27/04/2023 16:36]
Victim
We've been waiting all night tonight, please feel free to contact me anytime
[27/04/2023 17:04]
I know
[27/04/2023 17:39]
Gang
Sent the file
[27/04/2023 18:21]
Gang
which amount you are going to pay?
[27/04/2023 18:22]
Gang
Victim
Didn't you say 20000U?
[27/04/2023 18:25]
current price for decryption tool after disocunt is 20000 USD
[27/04/2023 18:25]
Gang
that's right
[27/04/2023 18:25]
Gang
just to figure out
[27/04/2023 18:25]
Gang
Victim
We are confirming the correctness of the document and will make payment immediately after confirmation. Please stay online and wait for me
[27/04/2023 18:26]
ok
[27/04/2023 18:27]
Gang
Victim
The customer cannot confirm that it is their own file. Can we decrypt a test file again?
[27/04/2023 18:42]
Victim
https://dropmefiles.com/[redacted]
[27/04/2023 18:44]
Sent the file
[27/04/2023 18:46]
Gang
Victim
wait a moment
[27/04/2023 18:49]
Victim
Confirm the transfer address, BTC quantity, and we are ready to make payment
[27/04/2023 19:07]
$20000 / 0.6874617 btc
[27/04/2023 19:12]
Gang
btc address [quotes BOT]
[27/04/2023 19:12]
Gang
Victim
Is this address? [quotes BOT]
[27/04/2023 19:12]
Victim
Ok wait
[27/04/2023 19:13]
Victim
Enclosed please find!
[27/04/2023 19:18]
yes
[27/04/2023 19:18]
Gang
Victim
Payment has been made. Please check the records on your end. Thank you
[27/04/2023 19:19]
Victim
How long can I receive the decryption tool
[27/04/2023 19:22]
in 30 minutes after payment
[27/04/2023 19:40]
Gang
we are waiting bitcoin network confirmations
[27/04/2023 19:40]
Gang
when payment will be credited to the account decryptor will be sent
[27/04/2023 19:41]
Gang
Victim
Okay, I've been waiting
[27/04/2023 19:46]
Received $19987
[27/04/2023 19:48]
Gang
Victim
hi
[27/04/2023 19:49]
Sent the decryptor. To unpack use the password: 123
[27/04/2023 19:52]
Gang
Victim
Hello, there are two file decryptors that cannot recognize it. Can you help restore it?
[29/04/2023 13:09]
Victim
These two files are very important to me
[29/04/2023 13:09]
Victim
https://dropmefiles.com/[redacted]
[29/04/2023 13:12]
Yes, wait a little
[29/04/2023 13:21]
Gang
Victim
Are you there?
[29/04/2023 18:23]
yes
[29/04/2023 18:51]
Gang
Hello
[29/04/2023 20:46]
Gang
I'm sorry, unfortunately these two files were not fully encrypted. They are missing critical recovery information, so I can't decrypt them.
[29/04/2023 20:46]
Gang