Serpent Ransomware data

File will be updated soon.
----------------------------------------------------------------------------------
##################################################################################Sierra-6
breedijklogistiek.com(??)->(??)
breeuwerlogistiek.com(??)->(??)
delijsterlogistiek.com(??)->(??)
schaaphoklogistiek.com(??)->(??)

http://breedijklogistiek.com/formulieren/{\d{7}}.doc
http://breeuwerlogistiek.com/formulieren/{\d{7}}.doc
http://delijsterlogistiek.com/formulieren/{\d{7}}.doc
http://schaaphoklogistiek.com/formulieren/{\d{7}}.doc

????????????????????????????????????????????????????????????????

http://??.??.??.??/??.??
http://??.??.??.??/??.??
http://??.??.??.??/??.??
http://??.??.??.??/??.??
http://??.??.??.??/??.??

????????????????????????????????????????????????????????????????

??.??.??.??/register.php

DianaBullion@secmail.pro
MichaelAllard@secmail.pro
##################################################################################Sierra-5
denbakkerlogistiek.com(??)->(191.96.249.114)
lokkersmalogistiek.com(??)->(191.96.249.134)
vanniesenlogistiek.com(??)->(191.96.249.140)
vantobbenlogistiek.com(??)->(191.96.249.133)

http://denbakkerlogistiek.com/formulieren/1125923.doc
http://lokkersmalogistiek.com/formulieren/5179224.doc
http://vanniesenlogistiek.com/formulieren/{\d{7}}.doc
http://vantobbenlogistiek.com/formulieren/3356821.doc

20935e453b6657772e2caadb7aa8347d99eaed375b0a9cfbea22da31bbedd812

http://191.96.249.114/pc.up
http://191.96.249.133/pc.up
http://191.96.249.134/pc.up
http://191.96.249.140/pc.up
http://191.96.249.201/pc.up

fd0693aeea853d210838c2e49ef638210389683c46baeb43fd400fec6b0e9a78
e40a0b1112ea2efb6dfe187d0467398610bf5daef9d0f5ddca326ab23931ffbb

185.183.96.22/register.php

LisaWhipple@secmail.pro
JonValdes@secmail.pro

##################################################################################Sierra-4
hazekamplogistiek.com(198.54.126.151)->(190.14.38.85)
kampingalogistiek.com(198.54.126.151)->(190.14.38.85)
siebelinklogistiek.com(185.61.153.75)->(190.14.38.86)
vanbakkumlogistiek.com(185.61.153.75)->(190.14.38.86)

http://hazekamplogistiek.com/formulieren/3571681.doc
http://kampingalogistiek.com/formulieren/4146813.doc
http://siebelinklogistiek.com/formulieren/3141578.doc
http://vanbakkumlogistiek.com/formulieren/{\d{7}}.doc

136922c7bd76aa5ebc2e508b5ded77c3ea5ead7a035b51e8f2edff1bb233f09c

http://190.14.38.85/eng.up
http://190.14.38.86/eng.up
http://190.14.38.87/eng.up

c156b51161ce015251df8652442beeb5aafed8e8207969671cd75577d1789b51
185.183.96.22/register.php

LisaWhipple@secmail.pro
JonValdes@secmail.pro
##################################################################################Sierra-3
grachterslogistiek.com(199.188.200.123)->(191.96.249.249)
vervoortlogistiek.com(185.61.153.73)->(191.96.249.235)
vogelaarlogistiek.com(199.188.200.123)->(191.96.249.238)
weezelaarlogistiek.com(185.61.153.73)->(191.96.249.98)

http://grachterslogistiek.com/formulieren/8817281.doc
http://vervoortlogistiek.com/formulieren/2315981.doc
http://vogelaarlogistiek.com/formulieren/3572117.doc
http://weezelaarlogistiek.com/formulieren/7751829.doc

df79b1ab41f5762254e541a0925486867ca2df64d2a5b433210815ae1769e9c6

http://191.96.249.98/key.sk
http://191.96.249.101/key.sk
http://191.96.249.235/key.sk
http://191.96.249.238/key.sk
http://191.96.249.249/key.sk

134e8c15f48fc43144ba97661f99fc05b9ad901ebc4b9bb9673e82aa8b7933a3 (Danish default, languagecode)
169.239.129.2/register.php

BrittneySmith@secmail.pro
Ethelrey@secmail.pro
################################################################################## Sierra-2
beldmanlogistiek.com(198.54.126.148)->(190.14.38.76)
miedemalogistiek.com(185.61.153.73)->(190.14.38.75)
rehorstlogistiek.com(185.61.153.73)->(190.14.38.75)
roetmanlogistiek.com(198.54.126.148)->(190.14.38.76)

http://beldmanlogistiek.com/formulieren/2316839.doc
http://miedemalogistiek.com/formulieren/7738921.doc
http://rehorstlogistiek.com/formulieren/6278731.doc
http://roetmanlogistiek.com/formulieren/8764121.doc

669a256dc8a32d6091474c0b0d47d148ccffa0d3cb602bdf305243dd923e369b

http://190.14.38.75/keyboard.rt
http://190.14.38.76/keyboard.rt
http://190.14.38.77/keyboard.rt

3dc7e677e26267b60814b1507840febcb6fe228c9d4cc4c8a45998d86e25fac7  (Danish default, languagecode)
169.239.129.2/register.php

BettyeMartinez@secmail.pro
DanielLee@secmail.pro
################################################################################## Sierra-1
kabelmanslogistiek.com(185.61.153.74)->(191.96.249.124)
middelboslogistiek.com(198.54.126.150)->(191.96.249.111)
vanblijerlogistiek.com(198.54.126.150)->(191.96.249.112)
vannugterenlogistiek.com(185.61.153.74)->(191.96.249.120)

sierra-dns.pw(185.145.129.20)
ns1.sierra-dns.pw(185.145.129.20)
ns2.sierra-dns.pw(185.145.129.20)

http://middelboslogistiek.com/formulieren/3579751.doc
http://vannugterenlogistiek.com/formulieren/6283912.doc
http://kabelmanslogistiek.com/formulieren/3346893.doc
http://vanblijerlogistiek.com/formulieren/3578965.doc

86593875ed1afbc5377ed08f3e2721d31cabe6f553e119490943a2ff77961a85

http://191.96.249.111/phone.pk
http://191.96.249.112/phone.pk
http://191.96.249.120/phone.pk
http://191.96.249.124/phone.pk
http://191.96.249.125/phone.pk

736e96ddfd91a39cf61cc70acfe2fd470ea180016e3930e8a2cd531d8f1dd8fc
31.7.188.113/register.php

94.156.175.49
94.156.175.56
79.124.78.170
zpkhtmew.pw
ghezmhtp.pw

DanielLee@secmail.pro
ScottSmith@secmail.pro
##################################################################################
krooslogistiek.com(185.61.153.72)->(191.96.249.153)
jeukenslogistiek.com(198.54.126.41)->(191.96.249.83)
tienstralogistiek.com(185.61.153.72)->(191.96.249.159)
vanderksenlogistiek.com(198.54.126.41)->(191.96.249.40)

http://jeukenslogistiek.com/formulieren/6621848.doc
91dbdb0f917a83d1af373eb016a1d1f06d6e7f7de5444af6155f1b2d19b0d76f

http://191.96.249.153/piano.pp
http://191.96.249.159/piano.pp
http://191.96.249.161/piano.pp
http://191.96.249.40/piano.pp
http://191.96.249.83/piano.pp

68c095929540d7db7163b60102dc5b45b194e24029fb4b84906193d8908cba69

moormanlogistiek.com(191.96.249.116)
beukemalogistiek.com(191.96.249.132)
bovenkamplogistiek.com(191.96.249.140)
hollemanlogistiek.com(191.96.249.201)

http://moormanlogistiek.com/formulieren/4146188.doc(191.96.249.116)
http://beukemalogistiek.com/formulieren/7739126.doc(191.96.249.132)
http://bovenkamplogistiek.com/formulieren/5698315.doc(191.96.249.140)
http://hollemanlogistiek.com/formulieren/7796181.doc(191.96.249.201)

5b06b49be4c94a4762dab0406b693e231edd36a6731ac75da5f38f68f8bad538

http://191.96.249.116/wheel.pk
http://191.96.249.132/wheel.pk
http://191.96.249.140/wheel.pk
http://191.96.249.201/wheel.pk
http://191.96.249.203/wheel.pk

3485f89af61b681aeff8ff765a0ab120b9267addb5388e9b3a5a1b3a261d4340

http://bosmantellogistiek.com/formulieren/9433125.doc
http://hielkemalogistiek.com/formulieren/5178246.doc
http://beckerlogistiek.com/formulieren/2718281.doc
http://ridderslogistiek.com/formulieren/6683734.doc

cdc0e2728f05aa81ec1d28595affe93045b72f75f443066ae3531a410399c62b

http://185.141.25.100/pass.nt
http://185.141.25.101/pass.nt
http://185.141.25.102/pass.nt

9074c4751069045b853dbabbd62dd829708fbbeb039241399cb29a7e9c787fe6
15de318eb9c8a9d6a9e1b4ff72edcf27fa82a39a158f3d75f9695ca7bf2edbd2

Domains:
strijkerlogistiek.com(185.141.26.108)
vanhunniklogistiek.com(185.141.26.108)
zwagermanlogistiek.com(185.141.26.108)
huizenlogistiek.com(185.141.26.100)
vanassenlogistiek.com(185.141.26.100)
maaslandlogistiek.com(185.141.26.100)

Maldocs:
http://{domain}/formulieren/{\d{7}}.doc

Used combinations;
2893879.doc
2315678.doc
3569387.doc
2348762.doc
3378961.doc
5771289.doc

Matched email-links;
http://vanassenlogistiek.com/formulieren/2893879.doc
http://maaslandlogistiek.com/formulieren/5771289.doc
http://strijkerlogistiek.com/formulieren/2315678.doc
http://vanhunniklogistiek.com/formulieren/3569387.doc

Hashes;
ca0f127a2b2b13206f48c41d452da075e3661a58fe1fc2e9a2778c85cf3407c1
4be0fff6e47b21cbae23fe3181b47775f0ea45c2b513bfd8b24f5a834c5f0c88

Payloads:
Locations;
http://185.141.26.100/mouse.zp
http://185.141.26.108/mouse.zp
http://185.141.26.110/mouse.zp

Hashes;
77ad3d02c49f157be5848ee743e9c7df9b81d41feca6cdf35c30da6526f9a013
7ed5452961326d280467b5ed9404d3a725f0da6ab11226ef98fc50c3afc58855
1e451cfb5880d852f69736a3f362af6c9ea9293e5d2c0d69a0ed52b9237e2832


Older sets will follow soon.
----------------------------------------------------------------------------------

derwielenlogistiek.com(185.82.200.19)
grootkoerkamplogistiek.com(185.82.200.19)
gruijterslogistiek.com(185.82.200.19)
leenmanlogistiek.com(185.82.200.19)
bieshaarlogistiek.com(185.82.200.17)
dertoornlogistiek.com(185.82.200.17)
tenwoldelogistiek.com(185.82.200.18)
vandiggelelogistiek.com(185.82.200.18)
tango-dns.pw(185.145.131.211)
ns1.tango-dns.pw(185.145.131.211)
ns2.tango-dns.pw(185.145.131.211)
a00611076736fdcb3e89673f6a130935bf251b861577196721665276dfe855cd
185.106.122.60/hnv.zp


	verheijdenlogistiek.com	N/A	2017-07-27	2018-07-27	registered
	overwijklogistiek.com	N/A	2017-07-27	2018-07-27	registered
	dermaaslogistiek.com	N/A	2017-07-27	2018-07-27	registered
	pleijsierlogistiek.com 	N/A	2017-07-27	2018-07-27	registered

http://dermaaslogistiek.com/formulieren/2414536.doc
http://verheijdenlogistiek.com/formulieren/7653142.doc
http://overwijklogistiek.com/formulieren/4412341.doc
http://pleijsierlogistiek.com/formulieren/5612451.doc
8c69de393ff2089162b8e81b01aff831560cc4c364802a2ee05de06d3d0019fb
3084e0da75c1b972c1ed5507a3f5ebd58d5962ed26559a7a03b193dc822e4edc
http://185.145.129.138/backup.zp
http://185.145.128.72/backup.zp
http://185.145.128.51/backup.zp
http://185.106.122.86/register.php


	holmerlogistiek.com	N/A	2017-07-26	2018-07-26	registered
http://holmerlogistiek.com/formulieren/5543671.doc 8043478eed0ffa77286c9964ea0a860bb67fac3727cddd3ead5b442f6b4cd880 http://185.148.146.207/capture.zp 828312cc4bf589bb599762d4469f4d62cddc184179ae9f69a2f5065abb362017 http://31.7.188.86/register.php

	eikamperlogistiek.com	N/A	2017-07-26	2018-07-26	registered
http://eikamperlogistiek.com/formulieren/4434178.doc 8043478eed0ffa77286c9964ea0a860bb67fac3727cddd3ead5b442f6b4cd880 http://185.148.146.207/capture.zp 828312cc4bf589bb599762d4469f4d62cddc184179ae9f69a2f5065abb362017 http://31.7.188.86/register.php

	haaimanlogistiek.com	N/A	2017-07-26	2018-07-26	registered
http://haaimanlogistiek.com/formulieren/5612678.doc 8043478eed0ffa77286c9964ea0a860bb67fac3727cddd3ead5b442f6b4cd880 http://185.148.146.207/capture.zp 828312cc4bf589bb599762d4469f4d62cddc184179ae9f69a2f5065abb362017 http://31.7.188.86/register.php

	dijkerslogistiek.com	N/A	2017-07-26	2018-07-26	registered
http://dijkerslogistiek.com/formulieren/2836712.doc 8043478eed0ffa77286c9964ea0a860bb67fac3727cddd3ead5b442f6b4cd880 http://185.148.146.207/capture.zp 828312cc4bf589bb599762d4469f4d62cddc184179ae9f69a2f5065abb362017 http://31.7.188.86/register.php

	ridderslogistiek.com	N/A	2017-07-25	2018-07-25	registered
http://ridderslogistiek.com/formulieren/6512674.doc 75cd2f42262ac15cbcfa913c173bd908719bb4a3124d094b323cf2d844ef8b61 http://185.183.99.24/update.zp 61764600d8fb7f84d6f578a72b409aa7dd7f1c3fb5705fb2792d8459e87726f2 http://169.239.128.114/register.php

	bakkumlogistiek.com	N/A	2017-07-25	2018-07-25	registered
http://bakkumlogistiek.com/formulieren/5512421.doc 75cd2f42262ac15cbcfa913c173bd908719bb4a3124d094b323cf2d844ef8b61 http://185.183.99.24/update.zp 61764600d8fb7f84d6f578a72b409aa7dd7f1c3fb5705fb2792d8459e87726f2 http://169.239.128.114/register.php

	beckerlogistiek.com	SwickHill@secmail.pro	2017-07-24	2018-07-24	registered
http://beckerlogistiek.com/formulieren/8815614.doc 75cd2f42262ac15cbcfa913c173bd908719bb4a3124d094b323cf2d844ef8b61 http://185.183.99.24/update.zp 61764600d8fb7f84d6f578a72b409aa7dd7f1c3fb5705fb2792d8459e87726f2 http://169.239.128.114/register.php

	alkemalogistiek.com	Marksmith@secmail.pro	2017-07-24	2018-07-24	registered
http://alkemalogistiek.com/formulieren/3416262.doc 75cd2f42262ac15cbcfa913c173bd908719bb4a3124d094b323cf2d844ef8b61 http://185.183.99.24/update.zp 61764600d8fb7f84d6f578a72b409aa7dd7f1c3fb5705fb2792d8459e87726f2 http://169.239.128.114/register.php

	vennerslogistiek.com	JamesSena@secmail.pro	2017-07-23	2018-07-23	registered
	lutterslogistiek.com	BicetownRoad@secmail.pro	2017-07-22	2018-07-22	registered
http://lutterslogistiek.com/formulieren/4762256.doc fc3c9f67ed85422b488251919a626b0645d51ff26fd4705fec45ec106301caf1 http://185.145.130.170/download.zp 2ef5e6e33f8c3c55a0815ba8d36a7bacb323cb0a9d9fbae552f2877093fa842f http://185.106.122.86/register.php

	poellmanlogistiek.com	JamesSena@secmail.pro	2017-07-21	2018-07-21	registered
http://poellmanlogistiek.com/formulieren/6372671.doc fc3c9f67ed85422b488251919a626b0645d51ff26fd4705fec45ec106301caf1 http://185.145.130.170/download.zp 2ef5e6e33f8c3c55a0815ba8d36a7bacb323cb0a9d9fbae552f2877093fa842f http://185.106.122.86/register.php

	oostdamlogistiek.com	JamesSena@secmail.pro	2017-07-21	2018-07-21	registered
http://oostdamlogistiek.com/formulieren/6112482.doc fc3c9f67ed85422b488251919a626b0645d51ff26fd4705fec45ec106301caf1 http://185.145.130.170/download.zp 2ef5e6e33f8c3c55a0815ba8d36a7bacb323cb0a9d9fbae552f2877093fa842f http://185.106.122.86/register.php

	borgerlogistiek.com	domains@offshore-hosting-service.com	2017-07-21	2018-07-21	registered
http://borgerlogistiek.com/formulieren/6215612.doc fc3c9f67ed85422b488251919a626b0645d51ff26fd4705fec45ec106301caf1 http://185.145.130.170/download.zp 2ef5e6e33f8c3c55a0815ba8d36a7bacb323cb0a9d9fbae552f2877093fa842f http://185.106.122.86/register.php





derwielenlogistiek.com
grootkoerkamplogistiek.com
gruijterslogistiek.com
leenmanlogistiek.com
bieshaarlogistiek.com
dertoornlogistiek.com
tenwoldelogistiek.com
vandiggelelogistiek.com
tango-dns.pw

bosmantellogistiek.com
hielkemalogistiek.com
moormanlogistiek.com
beukemalogistiek.com
verheijdenlogistiek.com
overwijklogistiek.com
pleijsierlogistiek.com
dermaaslogistiek.com
holmerlogistiek.com
eikamperlogistiek.com
haaimanlogistiek.com
dijkerslogistiek.com
ridderslogistiek.com
bakkumlogistiek.com
beckerlogistiek.com
alkemalogistiek.com
vennerslogistiek.com
lutterslogistiek.com
poellmanlogistiek.com
oostdamlogistiek.com
borgerlogistiek.com
foxtrot-dns.pw