Mallox — 20230427
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 62 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- Mallox
- Record date
- Apr 27, 2023
- Messages
- 62
- Participants
- BOT, hiervos, Support, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date hello?
-
Message 002 From Victim Victim Date Sent the file
-
Message 003 From Victim Victim Date Brother, please give me a discount
-
Message 004 From BOT Actor / other Date To send funds, use the BTC address specified below: [redacted]. Do not send more than 1 payment to this BTC address
-
Message 005 From BOT Actor / other Date Discount 20%. Discount expiration date: 2023-05-03
-
Message 006 From Victim Victim Date We are a small enterprise and we cannot afford to spend so much money. Is 5000 USD okay
-
Message 007 From BOT Actor / other Date To recover your files you need a decryption tool. We are ready to sell it to you at the price indicated on this page
-
Message 008 From Victim Victim Date If I were to make money now, how long would I be able to give me the tools
-
Message 009 From hiervos Actor / other Date Then we will complete the deal today.
-
Message 010 From Victim Victim Date Can you decrypt the test file so that we can take a look?
-
Message 011 From BOT Actor / other Date We can make test decrypt for free for not valuable files (xls, doc, bat, txt, jpeg, png, pdf, exe or etc)If you need a test then upload your file on any file host and send me download linkFile hosts: sendspace.com / dropmefiles.com / google.com/drive / file.io / wetransfer.com
-
Message 012 From Victim Victim Date https://dropmefiles.com/[redacted]
-
Message 013 From Victim Victim Date this link
-
Message 014 From hiervos Actor / other Date wait
-
Message 015 From Victim Victim Date Okay, please hurry up
-
Message 016 From Victim Victim Date We plan to make payment after seeing the decrypted test files. Could you please hurry up? Thank you
-
Message 017 From hiervos Actor / other Date wait
-
Message 018 From Victim Victim Date Could you please hurry up
-
Message 019 From hiervos Actor / other Date The technician went out, wait
-
Message 020 From Victim Victim Date Can we complete the transaction tonight? We have been waiting on our end, please make sure to complete the transaction tonight
-
Message 021 From hiervos Actor / other Date yes
-
Message 022 From Victim Victim Date Hello, has the technology returned? We have been waiting
-
Message 023 From hiervos Actor / other Date Wait patiently, don't worry, I will tell you after the production is completed
-
Message 024 From Victim Victim Date How long will it take
-
Message 025 From Victim Victim Date We've been waiting all night tonight, please feel free to contact me anytime
-
Message 026 From hiervos Actor / other Date I know
-
Message 027 From Support Actor / other Date Sent the file
-
Message 028 From Support Actor / other Date which amount you are going to pay?
-
Message 029 From Victim Victim Date Didn't you say 20000U?
-
Message 030 From Support Actor / other Date current price for decryption tool after disocunt is 20000 USD
-
Message 031 From Support Actor / other Date that's right
-
Message 032 From Support Actor / other Date just to figure out
-
Message 033 From Victim Victim Date We are confirming the correctness of the document and will make payment immediately after confirmation. Please stay online and wait for me
-
Message 034 From Support Actor / other Date ok
-
Message 035 From Victim Victim Date The customer cannot confirm that it is their own file. Can we decrypt a test file again?
-
Message 036 From Victim Victim Date https://dropmefiles.com/[redacted]
-
Message 037 From Support Actor / other Date Sent the file
-
Message 038 From Victim Victim Date wait a moment
-
Message 039 From Victim Victim Date Confirm the transfer address, BTC quantity, and we are ready to make payment
-
Message 040 From Support Actor / other Date $20000 / 0.6874617 btc
-
Message 041 From Support Actor / other Date btc address [quotes BOT]
-
Message 042 From Victim Victim Date Is this address? [quotes BOT]
-
Message 043 From Victim Victim Date Ok wait
-
Message 044 From Victim Victim Date Enclosed please find!
-
Message 045 From Support Actor / other Date yes
-
Message 046 From Victim Victim Date Payment has been made. Please check the records on your end. Thank you
-
Message 047 From Victim Victim Date How long can I receive the decryption tool
-
Message 048 From Support Actor / other Date in 30 minutes after payment
-
Message 049 From Support Actor / other Date we are waiting bitcoin network confirmations
-
Message 050 From Support Actor / other Date when payment will be credited to the account decryptor will be sent
-
Message 051 From Victim Victim Date Okay, I've been waiting
-
Message 052 From BOT Actor / other Date Received $19987
-
Message 053 From Victim Victim Date hi
-
Message 054 From Support Actor / other Date Sent the decryptor. To unpack use the password: 123
-
Message 055 From Victim Victim Date Hello, there are two file decryptors that cannot recognize it. Can you help restore it?
-
Message 056 From Victim Victim Date These two files are very important to me
-
Message 057 From Victim Victim Date https://dropmefiles.com/[redacted]
-
Message 058 From hiervos Actor / other Date Yes, wait a little
-
Message 059 From Victim Victim Date Are you there?
-
Message 060 From hiervos Actor / other Date yes
-
Message 061 From Support Actor / other Date Hello
-
Message 062 From Support Actor / other Date I'm sorry, unfortunately these two files were not fully encrypted. They are missing critical recovery information, so I can't decrypt them.