Ransomware negotiation(s) with  mallox



Avatar

hello?

[27/04/2023 09:09]
Avatar

Sent the file

[27/04/2023 09:14]
Avatar

Brother, please give me a discount

[27/04/2023 09:23]

To send funds, use the BTC address specified below: [redacted]. Do not send more than 1 payment to this BTC address

[27/04/2023 12:26]
Avatar

Discount 20%. Discount expiration date: 2023-05-03

[27/04/2023 12:26]
Avatar
Avatar

We are a small enterprise and we cannot afford to spend so much money. Is 5000 USD okay

[27/04/2023 12:41]

To recover your files you need a decryption tool. We are ready to sell it to you at the price indicated on this page

[27/04/2023 12:44]
Avatar
Avatar

If I were to make money now, how long would I be able to give me the tools

[27/04/2023 12:48]

Then we will complete the deal today.

[27/04/2023 12:51]
Avatar
Avatar

Can you decrypt the test file so that we can take a look?

[27/04/2023 12:52]

We can make test decrypt for free for not valuable files (xls, doc, bat, txt, jpeg, png, pdf, exe or etc)If you need a test then upload your file on any file host and send me download linkFile hosts: sendspace.com / dropmefiles.com / google.com/drive / file.io / wetransfer.com

[27/04/2023 12:56]
Avatar
Avatar

https://dropmefiles.com/[redacted]

[27/04/2023 12:57]
Avatar

this link

[27/04/2023 12:57]

wait

[27/04/2023 13:07]
Avatar
Avatar

Okay, please hurry up

[27/04/2023 13:08]
Avatar

We plan to make payment after seeing the decrypted test files. Could you please hurry up? Thank you

[27/04/2023 13:29]

wait

[27/04/2023 13:52]
Avatar
Avatar

Could you please hurry up

[27/04/2023 14:38]

The technician went out, wait

[27/04/2023 14:48]
Avatar
Avatar

Can we complete the transaction tonight? We have been waiting on our end, please make sure to complete the transaction tonight

[27/04/2023 14:49]

yes

[27/04/2023 14:53]
Avatar
Avatar

Hello, has the technology returned? We have been waiting

[27/04/2023 16:29]

Wait patiently, don't worry, I will tell you after the production is completed

[27/04/2023 16:35]
Avatar
Avatar

How long will it take

[27/04/2023 16:36]
Avatar

We've been waiting all night tonight, please feel free to contact me anytime

[27/04/2023 17:04]

I know

[27/04/2023 17:39]
Avatar

Sent the file

[27/04/2023 18:21]
Avatar

which amount you are going to pay?

[27/04/2023 18:22]
Avatar
Avatar

Didn't you say 20000U?

[27/04/2023 18:25]

current price for decryption tool after disocunt is 20000 USD

[27/04/2023 18:25]
Avatar

that's right

[27/04/2023 18:25]
Avatar

just to figure out

[27/04/2023 18:25]
Avatar
Avatar

We are confirming the correctness of the document and will make payment immediately after confirmation. Please stay online and wait for me

[27/04/2023 18:26]

ok

[27/04/2023 18:27]
Avatar
Avatar

The customer cannot confirm that it is their own file. Can we decrypt a test file again?

[27/04/2023 18:42]
Avatar

https://dropmefiles.com/[redacted]

[27/04/2023 18:44]

Sent the file

[27/04/2023 18:46]
Avatar
Avatar

wait a moment

[27/04/2023 18:49]
Avatar

Confirm the transfer address, BTC quantity, and we are ready to make payment

[27/04/2023 19:07]

$20000 / 0.6874617 btc

[27/04/2023 19:12]
Avatar

btc address [quotes BOT]

[27/04/2023 19:12]
Avatar
Avatar

Is this address? [quotes BOT]

[27/04/2023 19:12]
Avatar

Ok wait

[27/04/2023 19:13]
Avatar

Enclosed please find!

[27/04/2023 19:18]

yes

[27/04/2023 19:18]
Avatar
Avatar

Payment has been made. Please check the records on your end. Thank you

[27/04/2023 19:19]
Avatar

How long can I receive the decryption tool

[27/04/2023 19:22]

in 30 minutes after payment

[27/04/2023 19:40]
Avatar

we are waiting bitcoin network confirmations

[27/04/2023 19:40]
Avatar

when payment will be credited to the account decryptor will be sent

[27/04/2023 19:41]
Avatar
Avatar

Okay, I've been waiting

[27/04/2023 19:46]

Received $19987

[27/04/2023 19:48]
Avatar
Avatar

hi

[27/04/2023 19:49]

Sent the decryptor. To unpack use the password: 123

[27/04/2023 19:52]
Avatar
Avatar

Hello, there are two file decryptors that cannot recognize it. Can you help restore it?

[29/04/2023 13:09]
Avatar

These two files are very important to me

[29/04/2023 13:09]
Avatar

https://dropmefiles.com/[redacted]

[29/04/2023 13:12]

Yes, wait a little

[29/04/2023 13:21]
Avatar
Avatar

Are you there?

[29/04/2023 18:23]

yes

[29/04/2023 18:51]
Avatar

Hello

[29/04/2023 20:46]
Avatar

I'm sorry, unfortunately these two files were not fully encrypted. They are missing critical recovery information, so I can't decrypt them.

[29/04/2023 20:46]
Avatar

This information is provided by Valéry Marchive