trinity — 0004

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

1. Message 001 From victim Victim Date Not recorded

   Hello, We have a ransomware infection. How do I ㅐ it?

2. Message 002 From victim Victim Date Not recorded

   We have a ransomware infection. What should I do?

3. Message 003 From trinity Actor / other Date Not recorded

   hello

4. Message 004 From trinity Actor / other Date Not recorded

   you want to decrypt how many computers?

5. Message 005 From victim Victim Date Not recorded

   Three recovery PCs have been identified.

6. Message 006 From victim Victim Date Not recorded

   We need three recoveries.

7. Message 007 From trinity Actor / other Date Not recorded

   recovery price 0.5 bitcoin for 1 PC, 3pc=1.5 bitcoin after payment you will receive the decryption program which will automatically decrypt all files bitcoin wallet [redacted]

8. Message 008 From trinity Actor / other Date Not recorded

   when can I expect payment from you?

9. Message 009 From victim Victim Date Not recorded

   The annual sales are about 600 million won and the net profit is about 30 million won. The amount you mentioned is the amount we have to collect over five years. We could go bankrupt. We want to negotiate. Please save our company.

10. Message 010 From trinity Actor / other Date Not recorded

    we can offer a price for 3pc 1 bitcoin if you pay today

11. Message 011 From victim Victim Date Not recorded

    In terms of dollars, $4500,000 is the profit and $25,000 is the net profit.

12. Message 012 From victim Victim Date Not recorded

    We don't have any expenses. We only have $10,000 in our bank account. It's a [redacted] production company, but there's a lot of outstanding money...

13. Message 013 From victim Victim Date Not recorded

    In terms of dollars, $450,000 is the profit and $25,000 is the net profit. We don't have any expenses. We only have $10,000 in our bank account. It's a [redacted] production company, but there's a lot of outstanding money...

14. Message 014 From trinity Actor / other Date Not recorded

    I've spoken to the management we can accept $15,000 for 1 PC. if you pay at once

15. Message 015 From victim Victim Date Not recorded

    Please lower it a little bit. We need to get a loan and it's tomorrow weekend. Please.

16. Message 016 From trinity Actor / other Date Not recorded

    $39,000 for 3 PCs final offer we lowered it a little bit like you asked. It's $13,000 for 1 PC.

17. Message 017 From victim Victim Date Not recorded

    Thank you so much. But we have to get loans as I told you. One can be possible, but we need a lot of time to recover. Can you spend time?

18. Message 018 From trinity Actor / other Date Not recorded

    we are waiting for payment, 0.61 bitcoin to the above wallet. Do not delay the payment process as we have given you a big discount my boss can cancel the contract and discount if you delay.

19. Message 019 From trinity Actor / other Date Not recorded

    bitcoin wallet [redacted]

20. Message 020 From trinity Actor / other Date Not recorded

    0.61 bitcoin

21. Message 021 From victim Victim Date Not recorded

    As I said, I don't have money right now. And it's the weekend... I can't even go to the bank. Finally, give me a discount and plenty of time.

22. Message 022 From trinity Actor / other Date Not recorded

    All right, we're waiting. but don't drag it out.

23. Message 023 From trinity Actor / other Date Not recorded

    when can I expect a bitcoin transfer from you?

24. Message 024 From victim Victim Date Not recorded

    https://www.sendspace.com/file/[redacted]

25. Message 025 From victim Victim Date Not recorded

    We are sending you 2 ransomware infected files. Request you to do test recovery.

26. Message 026 From victim Victim Date Not recorded

    https://www.sendspace.com/file/[redacted]

27. Message 027 From victim Victim Date Not recorded

    I'm sorry, but I'd like to recover the two files contained in the url above.

28. Message 028 From trinity Actor / other Date Not recorded

    ok

29. Message 030 From trinity Actor / other Date Not recorded

    when will you pay after the test?

30. Message 031 From trinity Actor / other Date Not recorded

    you'll pay right after the test?

31. Message 032 From trinity Actor / other Date Not recorded

    we're waiting to hear back from you and do a test

32. Message 033 From victim Victim Date Not recorded

    It's difficult because it's the weekend. I need a day or two.

33. Message 034 From trinity Actor / other Date Not recorded

    https://file.io/[redacted]

34. Message 035 From trinity Actor / other Date Not recorded

    https://prnt.sc/[redacted]

35. Message 036 From trinity Actor / other Date Not recorded

    https://prnt.sc/[redacted]

36. Message 037 From trinity Actor / other Date Not recorded

    we're waiting for payment.

37. Message 038 From victim Victim Date Not recorded

    Data recovery has been validated. I'd like to ask you a favor. I have 13,000 dollars. So I would like to restore just one server first this weekend. Can you recover to 0.018 btc first And two days later, I would like to apply for a loan from the bank on Monday and restore the other two as well.

38. Message 039 From trinity Actor / other Date Not recorded

    we negotiated $39,000 and gave you a discount. fulfill the terms of the agreement you can wire us $13,000. to lock in the price and the discount today. While you take the credit, we'll prepare the decryptors. Don't change the terms of the agreement.

39. Message 040 From trinity Actor / other Date Not recorded

    [redacted]

40. Message 041 From trinity Actor / other Date Not recorded

    or we'll refund the original price 0.5 bitcoin per 1 pc.

41. Message 042 From trinity Actor / other Date Not recorded

    we keep our word and we ask you to keep yours

42. Message 043 From victim Victim Date Not recorded

    It's a little hard to understand. If I send $13,000, will you send me 1 recovery key first?

43. Message 044 From trinity Actor / other Date Not recorded

    if you send $13,000 we'll start preparing three decryptors for you. but we'll only ship them to you after you've paid the full $39,000. if you want to restore 1 pc, the price will be 0.5 bitcoin please respect the original agreements

44. Message 046 From trinity Actor / other Date Not recorded

    show us your intent send $13,000 today

45. Message 047 From victim Victim Date Not recorded

    Please wait a moment. I'm borrowing money now.

46. Message 048 From trinity Actor / other Date Not recorded

    ok

47. Message 049 From victim Victim Date Not recorded

    [redacted]

48. Message 050 From victim Victim Date Not recorded

    0.61 right?

49. Message 051 From trinity Actor / other Date Not recorded

    now39000$ 0.62

50. Message 053 From trinity Actor / other Date Not recorded

    bitcoin fell

51. Message 054 From victim Victim Date Not recorded

    Oh... We are preparing 0.61. Please, 0.61 btc.

52. Message 055 From trinity Actor / other Date Not recorded

    ok pay

53. Message 056 From victim Victim Date Not recorded

    Thank you, I think it will take about an hour or two. How long does it take for us to pay the btc and receive the recovery tool?

54. Message 057 From victim Victim Date Not recorded

    please check money 0.61BTC

55. Message 058 From victim Victim Date Not recorded

    TxID: [redacted]

56. Message 059 From victim Victim Date Not recorded

    TxID: [redacted]

57. Message 060 From victim Victim Date Not recorded

    Sorry TxID: [redacted]

58. Message 061 From trinity Actor / other Date Not recorded

    send us one file from each of the three computers you want to recover.

59. Message 062 From victim Victim Date Not recorded

    https://www.sendspace.com/file/[redacted]

60. Message 063 From victim Victim Date Not recorded

    https://www.sendspace.com/file/[redacted]

61. Message 064 From victim Victim Date Not recorded

    here file

62. Message 065 From trinity Actor / other Date Not recorded

    ok

63. Message 066 From trinity Actor / other Date Not recorded

    Please stand by. the boss will come and we'll send you three decoders.

64. Message 067 From victim Victim Date Not recorded

    ok i'm waiting

65. Message 068 From trinity Actor / other Date Not recorded

    30-40 min

66. Message 069 From victim Victim Date Not recorded

    ok Thanks

67. Message 070 From trinity Actor / other Date Not recorded

    before decryption Make copies of important files just in case password:123 run as administrator

68. Message 071 From trinity Actor / other Date Not recorded

    https://file.io/[redacted]

69. Message 072 From trinity Actor / other Date Not recorded

    if you want to decrypt all other files we are ready to make a very big discount. all other PCs for $11,000.

70. Message 073 From victim Victim Date Not recorded

    Can you tell me how to use it?

71. Message 074 From trinity Actor / other Date Not recorded

    before decryption Make copies of important files just in case

72. Message 075 From trinity Actor / other Date Not recorded

    unzip

73. Message 076 From trinity Actor / other Date Not recorded

    password:123

74. Message 077 From trinity Actor / other Date Not recorded

    run as administrator

75. Message 078 From trinity Actor / other Date Not recorded

    the program decrypts all files automatically

76. Message 079 From victim Victim Date Not recorded

    The file has been recovered, but it's all broken. I'd like to get the recovery tool again.

77. Message 080 From trinity Actor / other Date Not recorded

    https://file.io/[redacted]

78. Message 081 From trinity Actor / other Date Not recorded

    if some files have not been decrypted send us some files

79. Message 082 From victim Victim Date Not recorded

    Got into trouble. Program keeps turning off during early morning recovery... How do I fix the problem?

80. Message 083 From trinity Actor / other Date Not recorded

    program shuts down with an error? what do you mean?

81. Message 084 From victim Victim Date Not recorded

    I'm not sure. Only cd drive comes out of the black window and the window disappears

82. Message 085 From trinity Actor / other Date Not recorded

    are you running as an administrator? Did the files decrypt?

83. Message 086 From victim Victim Date Not recorded

    I decrypt a few and the program just turns off. After that, it just keeps turning off.

84. Message 087 From trinity Actor / other Date Not recorded

    try changing compatibility mode right-click on the program properties compatibility mode and check the box compatibility with windows 7/8

85. Message 088 From victim Victim Date Not recorded

    https://www.sendspace.com/file/[redacted]

86. Message 089 From victim Victim Date Not recorded

    I am sending you the data again from 3 servers. Please send it to the recovery key that has been confirmed to operate normally.

87. Message 090 From trinity Actor / other Date Not recorded

    Хорошо Пожалуйста, подождите.

88. Message 091 From trinity Actor / other Date Not recorded

    okay Please stand by.

89. Message 092 From trinity Actor / other Date Not recorded

    https://file.io/[redacted]

90. Message 093 From trinity Actor / other Date Not recorded

    we had no trouble deciphering it. try copying the files to an external drive and run it on another computer.

91. Message 094 From trinity Actor / other Date Not recorded

    https://file.io/[redacted]

92. Message 095 From victim Victim Date Not recorded

    I really appreciate the support. Thank you so much. I'll try again.

93. Message 096 From trinity Actor / other Date Not recorded

    ok

94. Message 097 From victim Victim Date Not recorded

    20 to 30 GB of database corruption... is there a fix?

95. Message 098 From trinity Actor / other Date Not recorded

    didn't decrypt the files?

96. Message 099 From victim Victim Date Not recorded

    1. It's been restored, but it's damaged. 2. Some materials are not recovered.

97. Message 100 From trinity Actor / other Date Not recorded

    how big is the file?

98. Message 101 From trinity Actor / other Date Not recorded

    https://dropmefiles.com/ download here

99. Message 102 From trinity Actor / other Date Not recorded

    upload the corrupted file here and upload 1 file that was not recovered

100. Message 103 From trinity Actor / other Date Not recorded

     the.trinitylock is gone?

101. Message 104 From victim Victim Date Not recorded

     I'll let you know our problem. 1. Some files cannot be recovered 2. Recovered, but the file does not open We don't know what to do.

102. Message 105 From victim Victim Date Not recorded

     https://dropmefiles.com/[redacted]

103. Message 106 From victim Victim Date Not recorded

     I'm sending you 5gb data. Please help.

104. Message 107 From victim Victim Date Not recorded

     please help me

105. Message 108 From trinity Actor / other Date Not recorded

     waiting please

106. Message 109 From victim Victim Date Not recorded

     ok thanks!!!!!

107. Message 110 From trinity Actor / other Date Not recorded

     there's a different encryption key you didn't pay for this ID.

108. Message 111 From victim Victim Date Not recorded

     We sent the data from the same computer. Where can I check the key you are talking about?

109. Message 112 From victim Victim Date Not recorded

     We paid for 3 keys, but we only received 1 recovery key. Shouldn't you give us 2 more keys? It's only 10% recovery... We can go out of business. Please help

110. Message 113 From trinity Actor / other Date Not recorded

     so there were network drives This is a different key. Let's decrypt all your computers. if you pay the $13,000.

111. Message 114 From trinity Actor / other Date Not recorded

     the first time you sent the files [redacted] [redacted] [redacted] [redacted]

112. Message 115 From trinity Actor / other Date Not recorded

     4 ID we made a decrypter on them.

113. Message 116 From trinity Actor / other Date Not recorded

     now you've sent files with the ID [redacted]

114. Message 117 From trinity Actor / other Date Not recorded

     all your ID [redacted] [redacted] [redacted] [redacted] [redacted] [redacted] [redacted] [redacted]

115. Message 118 From trinity Actor / other Date Not recorded

     you can see the file IDs through the HEX editor, at the end of each file

116. Message 119 From trinity Actor / other Date Not recorded

     you have to pay extra for other IDs $13,000 and we'll decrypt all your IDs. same wallet

117. Message 120 From victim Victim Date Not recorded

     https://dropmefiles.com/[redacted]

118. Message 121 From victim Victim Date Not recorded

     We don't know how to look at it. Can I test this? And please let me know your ID for this.

119. Message 122 From trinity Actor / other Date Not recorded

     [redacted].zip.trinitylock [redacted]

120. Message 123 From trinity Actor / other Date Not recorded

     [redacted]_LIST_202403.zip.trinitylock [redacted]

121. Message 124 From trinity Actor / other Date Not recorded

     you'll have to pay extra for another ID we'll make a decrypter

122. Message 125 From victim Victim Date Not recorded

     Is it the same ID as the 5g we sent you?

123. Message 126 From victim Victim Date Not recorded

     [redacted] For this, I would like to restore only one. Can you give me a quarter of a dollar And I'd like to test the zip file.

124. Message 127 From trinity Actor / other Date Not recorded

     13000$ 1 ID

125. Message 128 From trinity Actor / other Date Not recorded

     Is it the same ID as the 5g we sent you? YES [redacted]

126. Message 129 From victim Victim Date Not recorded

     1id? Aren't you going to give me all the rest of the keys? We hope to lower the cost further. Please, I really don't have any money...

127. Message 130 From trinity Actor / other Date Not recorded

     13000$ all ID

128. Message 131 From trinity Actor / other Date Not recorded

     0.22 btc

129. Message 132 From victim Victim Date Not recorded

     We really don't have any money, so we have to save it. I can get it tomorrow. Please give me a little discount one more time.

130. Message 133 From trinity Actor / other Date Not recorded

     13000$ for all id

131. Message 134 From victim Victim Date Not recorded

     We are borrowing money again. But $13000 is too much. Is $8000 possible? Please

132. Message 135 From trinity Actor / other Date Not recorded

     price 13000$

133. Message 136 From victim Victim Date Not recorded

     How many coins is 13000 dollars?

134. Message 137 From trinity Actor / other Date Not recorded

     0.21

135. Message 138 From trinity Actor / other Date Not recorded

     [redacted]

136. Message 139 From victim Victim Date Not recorded

     please check money 0.21BTC

137. Message 140 From trinity Actor / other Date Not recorded

     Please stand by.

138. Message 141 From trinity Actor / other Date Not recorded

     send 2 files from each PC you want to recover

139. Message 142 From victim Victim Date Not recorded

     https://dropmefiles.com/[redacted] One is the file I sent you

140. Message 143 From trinity Actor / other Date Not recorded

     Please stand by.

141. Message 144 From victim Victim Date Not recorded

     https://dropmefiles.com/[redacted]

142. Message 145 From victim Victim Date Not recorded

     here all file

143. Message 146 From trinity Actor / other Date Not recorded

     ok

144. Message 147 From victim Victim Date Not recorded

     How long will it take?

145. Message 148 From trinity Actor / other Date Not recorded

     waiting boss

146. Message 149 From trinity Actor / other Date Not recorded

     https://dropmefiles.com/[redacted]

147. Message 150 From trinity Actor / other Date Not recorded

     Sorry for delay

148. Message 151 From trinity Actor / other Date Not recorded

     password:123

149. Message 152 From victim Victim Date Not recorded

     https://dropmefiles.com/[redacted] We can't even restore it. Please tell me how to do this.

150. Message 153 From trinity Actor / other Date Not recorded

     min

151. Message 154 From trinity Actor / other Date Not recorded

     Please stand by.

152. Message 155 From victim Victim Date Not recorded

     How long will it take?

153. Message 156 From trinity Actor / other Date Not recorded

     waiting boss

154. Message 157 From victim Victim Date Not recorded

     We'll wait.

155. Message 158 From trinity Actor / other Date Not recorded

     Sorry for delay

156. Message 159 From victim Victim Date Not recorded

     Not yet? How much longer do I have to wait... Please help.

157. Message 160 From trinity Actor / other Date Not recorded

     Sorry for delay waiting please

158. Message 161 From victim Victim Date Not recorded

     ok

159. Message 162 From victim Victim Date Not recorded

     please help me

160. Message 163 From victim Victim Date Not recorded

     I can't recover it, what should I do?

161. Message 164 From trinity Actor / other Date Not recorded

     Sorry for delay waiting please

162. Message 165 From trinity Actor / other Date Not recorded

     how many files didn't decrypt?

163. Message 166 From trinity Actor / other Date Not recorded

     how many files didn't decrypt?

164. Message 167 From victim Victim Date Not recorded

     90% Unrecoverable

165. Message 168 From trinity Actor / other Date Not recorded

     90 percent of only 1 ID? Did the other IDs decrypt normally?

166. Message 169 From trinity Actor / other Date Not recorded

     ?