Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Negotiation Chat — trinity

Negotiation chats provided by Valéry Marchive and Julien Mousqueton.

Chat ID: 0002

Victim
.
Victim
Hello
Victim
https://www.sendspace.com/file/[redacted]
hello
Gang
you need to decrypt files?
Gang
Victim
YES. whats the price and process ?I have attched a file as well
price 20 000$
Gang
after payment you will receive the decryption program, and the NAS password
Gang
will you be paying?
Gang
Victim
Can you lower the price ? And show me the sample file
if you pay today. we are ready to make the price 17000$ you need to pay in bitcoin wallet [redacted] 0.26 bitcoin if you agree we will make a test
Gang
?
Gang
we're waiting to hear back from you
Gang
https://www.sendspace.com/file/[redacted] test file
Gang
will you be paying?
Gang
Victim
sorry. we had some problems with our systems and just now were able to get back in. do you still have the decrypotion program and NAS password available?
hi
Gang
yes
Gang
[redacted]
Gang
wallet
Gang
will you be paying?
Gang
will you be paying?
Gang
Victim
Sorry for the delays here. Is the price still $17,000 USD?
[redacted]
Gang
yes pay
Gang
0.3 bitcoin
Gang
Victim
Can yopu please accept 0.25 BTC if we pay today? We have to pay the broker for the bitcoin so altogether it will cost us more than $17K. Thank you.
Victim
Can you please accept 0.25 BTC if we pay today? We have to pay the broker for the bitcoin so altogether it will cost us more than $17K. Thank you!
0.28 ok
Gang
when can I expect payment from you?
Gang
Victim
Our managers have agreed to the 0.28 BTC payment. We are starting the process now.
ok
Gang
we're waiting
Gang
Victim
txid: [redacted]
NAS password [redacted]
Gang
to make a decriptor send us 4-5 files (1-10mb)
Gang
use https://www.file.io/
Gang
Victim
https://file.io/[redacted]
Victim
https://file.io/[redacted]
Victim
https://file.io/[redacted]
before running decrypt.exe Make a copy of important files!!! if decryption goes wrong, so that it can be restored.
Gang
https://file.io/[redacted]
Gang
password 123
Gang
download and run as administrator, the program will decrypt all files automatically
Gang
Victim
please send the password for the decrypt.zip file. thank you.
123
Gang
password 123
Gang
123
Gang
password 123
Gang
123
Gang
password 123
Gang
/Password 123
Gang