SoTaNik_AI Malware Intelligence

fog Log 1

5/26/2026, 9:36:09 AM

Log 179

fog5/17/2024, 8:30:51 AM

Do you need our help?

Victim5/23/2024, 3:55:28 AM

We would like to know what you are looking for from us. Your note says you copied data so we would like to understand what data you took.

fogInvalid Date

[provides a compressed 7zp files list]
this is what we took

fogInvalid Date

We can decrypt your systems in a couple of hours for only $400,000. Just send us 3 random encrypted files to be sure - we'll decrypt them for free.

VictimInvalid Date

Okay, we are working on that for you. Can you confirm that list is all of the data that you took?

fog5/24/2024, 8:37:03 AM

Yes this is all we took

Victim5/24/2024, 7:43:14 PM

Thank you. We are working on the files but will probably not have an update until after the weekend

fog5/27/2024, 7:57:09 AM

Hello. Have you managed to review?

Victim5/27/2024, 12:30:14 PM

Sorry we are working through one last item and it's late here. We will respond by tomorrow.

fog5/27/2024, 1:45:56 PM

We need you to speed up.

Victim5/28/2024, 3:25:26 AM

Are you able to send us the following files from that list?

Victim5/28/2024, 3:25:45 AM

Directory of E:\[redacted 1st directory]

Victim5/28/2024, 3:25:56 AM

Directory of E:\[redacted 2nd directory]

Victim5/28/2024, 3:26:02 AM

Directory of E:\[redacted 3rd directory]

fogInvalid Date

[provides provides 3 files]
these are the files from the directories you that gave

Victim5/29/2024, 12:23:06 AM

For the first directory, are you able to provide us this file? [redacted]\[redacted].docx

Victim5/29/2024, 12:23:28 AM

It looks like the full file path was originally cutoff when we requested it

fogInvalid Date

[provides provides 1 more file]

VictimInvalid Date

fogInvalid Date

what?

fogInvalid Date

lets get closer to a resolution here. Are you ready to make a transaction and get all this resolved?

Victim5/30/2024, 5:26:24 AM

We are going to have a bit more discussion today and over the weekend but should be in a good place to discuss more next week

Victim5/30/2024, 5:26:34 AM

Does this work?

fog5/30/2024, 7:54:29 AM

I will be waiting for numbers from you on Monday.

fog5/30/2024, 11:04:54 AM

https://privnote.com/[redacted] use the id on the link to access a new chat to discuss the price and payment

fog5/30/2024, 11:05:19 AM

I will be waiting for you there on Monday or earlier

fog5/30/2024, 11:05:30 AM

tell me when you access the new chat

Links

Link 1