Akira — 20240803
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 34 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- Akira
- Record date
- Aug 03, 2024
- Messages
- 34
- Participants
- Akira, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date Not recorded > Hello, we found your note
-
Message 002 From Akira Actor / other Date Not recorded > Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon.
Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.
-
Message 003 From Victim Victim Date Not recorded > yes
-
Message 004 From Akira Actor / other Date Not recorded > List.7z // 346 KB
-
Message 005 From Akira Actor / other Date Not recorded > These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10mb size from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10mb size to our chat and we will upload decrypted copies back.
-
Message 006 From Victim Victim Date Not recorded > Directory of C:\DATA\[redacted].doc Directory of C:\DATA\[redacted].xlsx Directory of C:\DATA\[redacted].doc Directory of C:\DATA\[redacted].xls Directory of C:\DATA\[redacted].xlsx
-
Message 007 From Akira Actor / other Date Not recorded > files (7).rar // 1.5 MB
-
Message 008 From Akira Actor / other Date Not recorded > Please review the files. Do you want to test our tool?
-
Message 009 From Victim Victim Date Not recorded > Can you please decrypt these files for us?
-
Message 010 From Victim Victim Date Not recorded > files.rar // 5.1 MB
-
Message 011 From Akira Actor / other Date Not recorded > The archive is corrupted. Please reupload asap.
-
Message 012 From Victim Victim Date Not recorded > files.rar // 5.1 MB
-
Message 013 From Akira Actor / other Date Not recorded > Same thing. Could you please upload the files one at a time?
-
Message 014 From Akira Actor / other Date Not recorded > We are waiting for the files today.
-
Message 015 From Victim Victim Date Not recorded > [redacted].ini.akira // 82.3 KB
-
Message 016 From Victim Victim Date Not recorded > [redacted].ocx.akira // 830 KB
-
Message 017 From Victim Victim Date Not recorded > [redacted].DAT.akira // 587 KB
-
Message 018 From Victim Victim Date Not recorded > [redacted].VD7.akira // 2.76 MB
-
Message 019 From Victim Victim Date Not recorded > [redacted].mdb.akira // 4.09 MB
-
Message 020 From Akira Actor / other Date Not recorded > decrypted.7z // 4.99 MB
-
Message 021 From Akira Actor / other Date Not recorded > You can review the files.
-
Message 022 From Victim Victim Date Not recorded > Thank you for providing us with the decrypted files. How do we go about getting the rest of our files decrypted?
-
Message 023 From Akira Actor / other Date Not recorded > We will give you our decryption tool after payment. You will recover your systems within 24 hours.
-
Message 024 From Victim Victim Date Not recorded > How much does the decryption tool cost?
-
Message 025 From Akira Actor / other Date Not recorded > 1) full decryption assistance $275,000; 2) evidence of data removal $200,000; 3) security report on vulnerabilities we found $35,000; Guarantees are included. The full deal is $400,000.
-
Message 026 From Victim Victim Date Not recorded > We are interested in the decryption tool and can pay quickly, but we cannot offer what you are asking. What type of discount can you offer to help speed up this process?
-
Message 027 From Akira Actor / other Date Not recorded > Sure. $250,000 if you make payment within 48 hours.
-
Message 028 From Victim Victim Date Not recorded > $250,000 for the full deal, correct?
-
Message 029 From Akira Actor / other Date Not recorded > $250,000 is the discounted price for the tool. If you want the full deal and are ready to pay within 48 hours, we can accept $350,000.
-
Message 030 From Victim Victim Date Not recorded > Can you please provide instructions for payment
-
Message 031 From Akira Actor / other Date Not recorded > We accept bitcoins. To gain bitcoins you have to go to any exchange platform as binance or coinbase. Here are the guides: https://www.coinbase.com/how-to-buy/bitcoin https://www.binance.com/en/how-to-buy/bitcoin You also can buy bitcoin from any local brokers. If you withdraw funds from your bank account, then you have to inform the bank that you need this money for investment purposes only. Here is our BTC wallet ID for payment: [redacted]
-
Message 032 From Victim Victim Date Not recorded > payment was just sent, can you please confirm
-
Message 033 From Akira Actor / other Date Not recorded > unlockers.7z // 2.1 MB
-
Message 034 From Akira Actor / other Date Not recorded > unlocker.exe -p="path_to_unlock" unlocker.exe -s="C:\paths.txt" where "paths.txt" is a list of paths for the decryptor, each path on a new line ESXi commands 1) chmod +x unlocker 2)./unlocker -p="/vmfs/volumes"