Victim #251

arvatologistics.com.cn

Speaking with LOCKBIT

Victim #251

You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat. If your archive weighs more than 10 megabytes, please use our file sharing service. http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion For security reasons we do not click on other links you send in chat. Please wait for a reply, sometimes it takes several hours due to possible time zone differences.

Mon Apr 14 2025 01:14:45 GMT+0000 (Coordinated Universal Time)

Victim #251

price for decryption?

Mon Apr 14 2025 01:49:29 GMT+0000 (Coordinated Universal Time)

Victim #251


Attachment: vmware-14.log.rar

Mon Apr 14 2025 03:19:00 GMT+0000 (Coordinated Universal Time)

Victim #251


Attachment: 解密.zip

Mon Apr 14 2025 03:54:08 GMT+0000 (Coordinated Universal Time)

Victim #251

Hello, we are the sole intermediary designated by the client. Could you kindly decrypt it? May I ask the client

Mon Apr 14 2025 05:00:38 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Hello

Mon Apr 14 2025 05:41:32 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Yes . wait

Mon Apr 14 2025 05:42:06 GMT+0000 (Coordinated Universal Time)

Victim #251

多少

Mon Apr 14 2025 07:00:09 GMT+0000 (Coordinated Universal Time)

Victim #251

Please help provide a quotation after decryption

Mon Apr 14 2025 07:02:00 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Please wait

Mon Apr 14 2025 07:02:30 GMT+0000 (Coordinated Universal Time)

Victim #251

OK

Mon Apr 14 2025 07:04:36 GMT+0000 (Coordinated Universal Time)

Victim #251

When can we expect the results to be available

Mon Apr 14 2025 07:09:34 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Today or deadline tomorrow

Mon Apr 14 2025 09:45:15 GMT+0000 (Coordinated Universal Time)

LOCKBIT


Attachment: 解密.zip

Mon Apr 14 2025 11:40:24 GMT+0000 (Coordinated Universal Time)

Victim #251

tell price?

Mon Apr 14 2025 11:57:18 GMT+0000 (Coordinated Universal Time)

LOCKBIT

0.75 BTC all network

Mon Apr 14 2025 12:05:36 GMT+0000 (Coordinated Universal Time)

Victim #251

understand

Mon Apr 14 2025 14:31:50 GMT+0000 (Coordinated Universal Time)

Victim #251

We are the only decryption partner designated by the client. As the client has a relatively small scale, what is the lowest price you can accept for this? We hope to achieve cooperation between both parties as much as possible

Mon Apr 14 2025 14:32:55 GMT+0000 (Coordinated Universal Time)

Victim #251

Waiting for your reply

Mon Apr 14 2025 15:27:16 GMT+0000 (Coordinated Universal Time)

LOCKBIT

We set this price because we know the client is able to pay. This is a low price for this company.

Mon Apr 14 2025 15:31:15 GMT+0000 (Coordinated Universal Time)

Victim #251

Why do you say that? We are intermediaries for our clients. Could you please let us know so that we can have effective communication.

Mon Apr 14 2025 15:36:28 GMT+0000 (Coordinated Universal Time)

Victim #251

Are you all the bank deposit information of the company

Mon Apr 14 2025 15:38:08 GMT+0000 (Coordinated Universal Time)

Victim #251

Hello, it is necessary for us to tell you about the current economic situation in China. The Chinese economy has declined by 40%, and the cost and tax of enterprise employees have risen sharply, resulting in insufficient demand and causing many small companies to be unable to survive. As the designated negotiation agency of the client, we hope that your efforts will not be in vain and that you can also help the client complete the decryption. However, the cost is really beyond the client's affordability, and we hope that you can take a step back

Mon Apr 14 2025 15:41:55 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Yes, we have information about the finances of this company. We know for sure that this is not a large sum for them. In addition, many servers were encrypted. We will not discuss the economy of China here now. We are here only so that your client pays us and gets his data back.

Mon Apr 14 2025 15:49:27 GMT+0000 (Coordinated Universal Time)

Victim #251

Understood, as the client's agent handling this matter, could you please provide us with the account information file so that we can communicate and interact with them

Mon Apr 14 2025 23:04:58 GMT+0000 (Coordinated Universal Time)

Victim #251

Also, can we discuss the price and determine the minimum cost that can be offered

Mon Apr 14 2025 23:06:34 GMT+0000 (Coordinated Universal Time)

LOCKBIT

The only thing we can do is give you a discount on condition that payment is made within three days.

Tue Apr 15 2025 05:03:54 GMT+0000 (Coordinated Universal Time)

Victim #251

offer from client. they won't pay, if amount is over $10000. consider it and reply. thank you.

Tue Apr 15 2025 09:00:24 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Do they want to get their servers with information back?

Tue Apr 15 2025 09:05:19 GMT+0000 (Coordinated Universal Time)

Victim #251

yes. but the value of data isn't over $10000

Tue Apr 15 2025 09:27:43 GMT+0000 (Coordinated Universal Time)

LOCKBIT

We will wait for a better offer from you.

Tue Apr 15 2025 11:37:37 GMT+0000 (Coordinated Universal Time)

Victim #251

It's impossible. The client doesn't have that much budget, at most only $10000

Thu Apr 17 2025 01:08:36 GMT+0000 (Coordinated Universal Time)

Victim #251

You want too much, it's not a big deal

Thu Apr 17 2025 01:09:54 GMT+0000 (Coordinated Universal Time)

LOCKBIT

We will meet you halfway and we can close this issue for $17,000

Thu Apr 17 2025 05:28:02 GMT+0000 (Coordinated Universal Time)

Victim #251

It's not that we don't want to talk, it's that the Chinese police don't allow them to do this. They have to spend their own money to do this, and in a sense it is also subject to government supervision. The customers really don't have that much money. Do you think 10,000 US dollars is okay? We will communicate and the deal will be done quickly.

Fri Apr 18 2025 02:57:45 GMT+0000 (Coordinated Universal Time)

LOCKBIT

If you pay fast, 12000$ and we close this issue

Fri Apr 18 2025 04:45:54 GMT+0000 (Coordinated Universal Time)

Victim #251

$10000 pay in 48 hours. if agree, I will help both you and the client.

Fri Apr 18 2025 08:28:50 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Tomorrow

Fri Apr 18 2025 10:06:18 GMT+0000 (Coordinated Universal Time)

Victim #251

what mean?

Fri Apr 18 2025 10:12:53 GMT+0000 (Coordinated Universal Time)

LOCKBIT

10000$ you need pay tomorrow , if late we come back to 12000$

Fri Apr 18 2025 10:19:40 GMT+0000 (Coordinated Universal Time)

Victim #251

$10000 pay in 36 hours. that is the shortest time to solve this issue.

Fri Apr 18 2025 10:23:04 GMT+0000 (Coordinated Universal Time)

Victim #251

I am ready to pay today. but I also have some problems. 1: some vmdk files were encypted with suffix 907b0AeE, but a few were encrypted with suffix 907b0AeEdxN4yX1DFxh, does that mean the files with 907b0AeEdxN4yX1DFxh can't be decrypted at all? 2: $10000 for whole networks decryption means you will send all decryption tool to me, if the windows files were encrypted, could you tell me whether the windows files were encrypted? 3: when will you send decryption after payment, Does your boss work today?

Sat Apr 19 2025 03:48:40 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Hello

Sat Apr 19 2025 07:08:57 GMT+0000 (Coordinated Universal Time)

LOCKBIT

This is normal. Everything is correct. After payment you will receive instructions and decryption tools

Sat Apr 19 2025 07:10:42 GMT+0000 (Coordinated Universal Time)

Victim #251

How long will you send me decryption key after payment?

Sat Apr 19 2025 07:56:08 GMT+0000 (Coordinated Universal Time)

Victim #251

Send me your btc wallet and exactly amount. I will finish payment in 2 hours.

Sat Apr 19 2025 08:01:34 GMT+0000 (Coordinated Universal Time)

Victim #251

Hi, I am waiting for your reply.

Sat Apr 19 2025 08:36:59 GMT+0000 (Coordinated Universal Time)

LOCKBIT

BTC - bc1qe7zlhpdjc75te4lgzfwyy3ygsnp6shdg9lrt97

Sat Apr 19 2025 09:33:43 GMT+0000 (Coordinated Universal Time)

LOCKBIT

0.12 BTC

Sat Apr 19 2025 09:35:13 GMT+0000 (Coordinated Universal Time)

Victim #251

according current BTC price, $10000=0.1172 btc

Sat Apr 19 2025 09:36:13 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes ok

Sat Apr 19 2025 09:38:43 GMT+0000 (Coordinated Universal Time)

Victim #251

paid. hash: 5f07c26f15e5205de9ceff67315b0d119bdc2febaccd3cff45bc21bdc6fa6214

Sat Apr 19 2025 09:49:48 GMT+0000 (Coordinated Universal Time)

Victim #251


Attachment: vmware-14.log.zip

Sat Apr 19 2025 09:51:46 GMT+0000 (Coordinated Universal Time)

Victim #251

here is a sample, if you need it to generate decryption tool. thank you.

Sat Apr 19 2025 09:53:33 GMT+0000 (Coordinated Universal Time)

LOCKBIT

wait pls

Sat Apr 19 2025 11:00:52 GMT+0000 (Coordinated Universal Time)

LOCKBIT


Attachment: decrypt_ESXI.zip

Sat Apr 19 2025 11:14:32 GMT+0000 (Coordinated Universal Time)

LOCKBIT

chmod +x decrypt_ESXI_X64 ./decrypt_ESXI_X64

Sat Apr 19 2025 11:15:24 GMT+0000 (Coordinated Universal Time)

Victim #251

is there a program run in windows x86?

Sat Apr 19 2025 13:10:45 GMT+0000 (Coordinated Universal Time)

Victim #251

could this decrypt_esxi_x64 run in Ubuntu system? I ran it in Ubuntu, but the sample files can't be decrypted at all. what is wrong? Before I run it in the encrypted ESXI, I should test whether it can work well or not. Could you send Window X86 program or program could run in centos or Ubuntu.

Sat Apr 19 2025 13:36:12 GMT+0000 (Coordinated Universal Time)

Victim #251


Attachment: decrypt.zip

Sat Apr 19 2025 13:40:38 GMT+0000 (Coordinated Universal Time)

Victim #251

here is the decrpt.llg which I run in Ubuntu. please tell me how to solve it. Is the decrypt program right?

Sat Apr 19 2025 13:41:42 GMT+0000 (Coordinated Universal Time)

LOCKBIT

./decrypt_ESXI_X64 -i /home/user/folder

Sat Apr 19 2025 13:55:23 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Put the files for decryption into the folder, you do not need to specify any parameters in ESXI, it will find all the files and decrypt them

Sat Apr 19 2025 13:56:43 GMT+0000 (Coordinated Universal Time)

Victim #251

./decrypt_ESXI_X64 -i /home/user/folder can't work in Ubuntu. no any response. All 3 test files can't be decrypted. should I have to run in ESXI ?

Sat Apr 19 2025 14:02:24 GMT+0000 (Coordinated Universal Time)

LOCKBIT

descriptor for ESXI, start it

Sat Apr 19 2025 14:05:38 GMT+0000 (Coordinated Universal Time)

Victim #251

I will reinstall a new ESXI and run this program on it. I hope you can send a program run in WINDOWS

Sat Apr 19 2025 14:07:47 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Your locker ID belongs to ESXI, I can't give you a decryptor for WINDOWS!

Sat Apr 19 2025 14:13:00 GMT+0000 (Coordinated Universal Time)

LOCKBIT

You don't need to reinstall anything, just run it on the ESXI host that was encrypted and on which you took the note in order to get into this chat

Sat Apr 19 2025 14:14:17 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Hello

Tue Apr 22 2025 05:06:37 GMT+0000 (Coordinated Universal Time)

End of chat