--------------------------------------------------------------------------------------------
    |                                                                                          |
    |            Hello dear Management of Active directory domain                              |
    |                                                                                          |
    |            If you are reading this message,it means that:                                |
    |                                                                                          |
    |            * your network infrastructure has been compromised                            |
    |            * critical data was leaked                                                    |
    |            * files are encrypted                                                         |
    |            * backups are deleted                                                         |
    |                                                                                          |
    |            The best and only thing you can do is to cantact us                           |
    |            to setle the matter before any losses occurs                                  |
    |                                                                                          |
    |            All your critical data was leaked on our website                              |
    |            Download Tor browser:https://www.torproject.org                               |
    |                                                                                          |
    |   http://onyxcym4mjilrsptk5uo2dhesbwntuban55mvww2olk5ygqafhu3i3yd.onion                  |
    |                                                                                          |
    |            Download (https://qtox.github.io) to negotiate online                         |
    |    Tox ID:19A549A57160F384CF4E36EE1A24747ED99C623C48EA545F343296FB7092795D00875C94151E   |
    |                                                                                          |
    |                                                                                          |
    |                                                                helldown@onionmail.org    |
    --------------------------------------------------------------------------------------------

Indicators of Compromise