Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Negotiation Chat – trinity

Chat ID: 0002

Victim Avatar
.
Victim Avatar
Hello
Victim Avatar
https://www.sendspace.com/file/[redacted]
hello
Gang Avatar
you need to decrypt files?
Gang Avatar
Victim Avatar
YES. whats the price and process ?I have attched a file as well
price 20 000$
Gang Avatar
after payment you will receive the decryption program, and the NAS password
Gang Avatar
will you be paying?
Gang Avatar
Victim Avatar
Can you lower the price ? And show me the sample file
if you pay today. we are ready to make the price 17000$ you need to pay in bitcoin wallet [redacted] 0.26 bitcoin if you agree we will make a test
Gang Avatar
?
Gang Avatar
we're waiting to hear back from you
Gang Avatar
https://www.sendspace.com/file/[redacted] test file
Gang Avatar
will you be paying?
Gang Avatar
Victim Avatar
sorry. we had some problems with our systems and just now were able to get back in. do you still have the decrypotion program and NAS password available?
hi
Gang Avatar
yes
Gang Avatar
[redacted]
Gang Avatar
wallet
Gang Avatar
will you be paying?
Gang Avatar
will you be paying?
Gang Avatar
Victim Avatar
Sorry for the delays here. Is the price still $17,000 USD?
[redacted]
Gang Avatar
yes pay
Gang Avatar
0.3 bitcoin
Gang Avatar
Victim Avatar
Can yopu please accept 0.25 BTC if we pay today? We have to pay the broker for the bitcoin so altogether it will cost us more than $17K. Thank you.
Victim Avatar
Can you please accept 0.25 BTC if we pay today? We have to pay the broker for the bitcoin so altogether it will cost us more than $17K. Thank you!
0.28 ok
Gang Avatar
when can I expect payment from you?
Gang Avatar
Victim Avatar
Our managers have agreed to the 0.28 BTC payment. We are starting the process now.
ok
Gang Avatar
we're waiting
Gang Avatar
Victim Avatar
txid: [redacted]
NAS password [redacted]
Gang Avatar
to make a decriptor send us 4-5 files (1-10mb)
Gang Avatar
use https://www.file.io/
Gang Avatar
Victim Avatar
https://file.io/[redacted]
Victim Avatar
https://file.io/[redacted]
Victim Avatar
https://file.io/[redacted]
before running decrypt.exe Make a copy of important files!!! if decryption goes wrong, so that it can be restored.
Gang Avatar
https://file.io/[redacted]
Gang Avatar
password 123
Gang Avatar
download and run as administrator, the program will decrypt all files automatically
Gang Avatar
Victim Avatar
please send the password for the decrypt.zip file. thank you.
123
Gang Avatar
password 123
Gang Avatar
123
Gang Avatar
password 123
Gang Avatar
123
Gang Avatar
password 123
Gang Avatar
/Password 123
Gang Avatar