Negotiation Chat — Mallox
Return to Mallox
Negotiation chats provided by Valéry Marchive and Julien Mousqueton.
Chat ID: 20230427
Initial Ransom
$20,000
Negotiated Ransom
$19,987
Ransom Paid
Yes
hello？
[27/04/2023 09:09]
Sent the file
[27/04/2023 09:14]
Brother, please give me a discount
[27/04/2023 09:23]
To send funds, use the BTC address specified below: [redacted]. Do not send more than 1 payment to this BTC address
[27/04/2023 12:26]
Discount 20%. Discount expiration date: 2023-05-03
[27/04/2023 12:26]
We are a small enterprise and we cannot afford to spend so much money. Is 5000 USD okay
[27/04/2023 12:41]
To recover your files you need a decryption tool. We are ready to sell it to you at the price indicated on this page
[27/04/2023 12:44]
If I were to make money now, how long would I be able to give me the tools
[27/04/2023 12:48]
Then we will complete the deal today.
[27/04/2023 12:51]
Can you decrypt the test file so that we can take a look?
[27/04/2023 12:52]
We can make test decrypt for free for not valuable files (xls, doc, bat, txt, jpeg, png, pdf, exe or etc)If you need a test then upload your file on any file host and send me download linkFile hosts: sendspace.com / dropmefiles.com / google.com/drive / file.io / wetransfer.com
[27/04/2023 12:56]
https://dropmefiles.com/[redacted]
[27/04/2023 12:57]
this link
[27/04/2023 12:57]
wait
[27/04/2023 13:07]
Okay, please hurry up
[27/04/2023 13:08]
We plan to make payment after seeing the decrypted test files. Could you please hurry up? Thank you
[27/04/2023 13:29]
wait
[27/04/2023 13:52]
Could you please hurry up
[27/04/2023 14:38]
The technician went out, wait
[27/04/2023 14:48]
Can we complete the transaction tonight? We have been waiting on our end, please make sure to complete the transaction tonight
[27/04/2023 14:49]
yes
[27/04/2023 14:53]
Hello, has the technology returned? We have been waiting
[27/04/2023 16:29]
Wait patiently, don't worry, I will tell you after the production is completed
[27/04/2023 16:35]
How long will it take
[27/04/2023 16:36]
We've been waiting all night tonight, please feel free to contact me anytime
[27/04/2023 17:04]
I know
[27/04/2023 17:39]
Sent the file
[27/04/2023 18:21]
which amount you are going to pay?
[27/04/2023 18:22]
Didn't you say 20000U?
[27/04/2023 18:25]
current price for decryption tool after disocunt is 20000 USD
[27/04/2023 18:25]
that's right
[27/04/2023 18:25]
just to figure out
[27/04/2023 18:25]
We are
confirming the correctness of the document and will make payment
immediately after confirmation. Please stay online and wait for me
[27/04/2023 18:26]
ok
[27/04/2023 18:27]
The customer cannot confirm that it is their own file. Can we decrypt a test file again?
[27/04/2023 18:42]
https://dropmefiles.com/[redacted]
[27/04/2023 18:44]
Sent the file
[27/04/2023 18:46]
wait a moment
[27/04/2023 18:49]
Confirm the transfer address, BTC quantity, and we are ready to make payment
[27/04/2023 19:07]
$20000 / 0.6874617 btc
[27/04/2023 19:12]
btc address [quotes BOT]
[27/04/2023 19:12]
Is this address? [quotes BOT]
[27/04/2023 19:12]
Ok
wait
[27/04/2023 19:13]
Enclosed please find!
[27/04/2023 19:18]
yes
[27/04/2023 19:18]
Payment has been made. Please check the records on your end. Thank you
[27/04/2023 19:19]
How long can I receive the decryption tool
[27/04/2023 19:22]
in 30 minutes after payment
[27/04/2023 19:40]
we are waiting bitcoin network confirmations
[27/04/2023 19:40]
when payment will be credited to the account decryptor will be sent
[27/04/2023 19:41]
Okay, I've been waiting
[27/04/2023 19:46]
Received $19987
[27/04/2023 19:48]
hi
[27/04/2023 19:49]
Sent the decryptor. To unpack use the password: 123
[27/04/2023 19:52]
Hello, there are two file decryptors that cannot recognize it. Can you help restore it?
[29/04/2023 13:09]
These two files are very important to me
[29/04/2023 13:09]
https://dropmefiles.com/[redacted]
[29/04/2023 13:12]
Yes, wait a little
[29/04/2023 13:21]
Are you there?
[29/04/2023 18:23]
yes
[29/04/2023 18:51]
Hello
[29/04/2023 20:46]
I'm
sorry, unfortunately these two files were not fully encrypted. They are
missing critical recovery information, so I can't decrypt them.
[29/04/2023 20:46]