// Context
About This Negotiation
This transcript documents a Dragonforce ransomware negotiation with Ab0404E049514B50.
The negotiation consisted of 28 messages exchanged over Unknown.
The initial ransom demand was $500,000. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at
enquiries@binary-response.com — we will act promptly.
[Ab0404E049514B50] — 2025-04-10T23:16:50.760546Z — Message 1/28
Where is the listing is step 1?
[Dragonforce] — 2025-04-11T00:18:00.831244Z — Message 2/28
tree.txt filesize:2352921
[Dragonforce] — 2025-04-11T00:18:16.513956Z — Message 3/28
Here is the list of files.
[Ab0404E049514B50] — 2025-04-12T13:28:39.055759Z — Message 4/28
We will work on getting you the 3 files
[Ab0404E049514B50] — 2025-04-12T13:28:52.697488Z — Message 5/28
How did you all get in?
[Dragonforce] — 2025-04-12T13:32:40.055477Z — Message 6/28
Data on the method of penetration and work within the network are provided only after successful completion of negotiations. We are waiting for your files to demonstrate the test decryption.
[Ab0404E049514B50] — 2025-04-13T03:05:19.964810Z — Message 7/28
Will work on that too
[Ab0404E049514B50] — 2025-04-14T18:40:51.565505Z — Message 8/28
Please provide us with the following files:
[Ab0404E049514B50] — 2025-04-14T18:41:07.665303Z — Message 9/28
[Redacted].pdf [Redacted].xlsx [Redacted].xlsx
[Dragonforce] — 2025-04-14T18:47:10.846028Z — Message 10/28
[Redacted].xlsx filesize:1826490
[Dragonforce] — 2025-04-14T18:47:35.671018Z — Message 11/28
[Redacted].pdf filesize:2490220
[Dragonforce] — 2025-04-14T18:48:11.168050Z — Message 12/28
[Redacted].xlsx filesize:2774610
[Dragonforce] — 2025-04-14T18:48:48.901797Z — Message 13/28
[Redacted].xlsx filesize:132809
[Ab0404E049514B50] — 2025-04-15T02:43:29.785757Z — Message 14/28
We will check theses out.
[Ab0404E049514B50] — 2025-04-15T18:57:07.383843Z — Message 15/28
Is this everything you have? What are you wanting from us?
[Dragonforce] — 2025-04-15T19:00:36.817314Z — Message 16/28
Have you checked the decryption capability and made sure that we have the files?
[Ab0404E049514B50] — 2025-04-15T19:06:24.489669Z — Message 17/28
We could only decrypt one file but it worked from what we could tell and you sent us the files we requested from the list provided.
[Dragonforce] — 2025-04-15T19:09:07.493667Z — Message 18/28
We can decrypt all the data back, and we will delete the data that is received from your network. The cost will be 500,000$
[Ab0404E049514B50] — 2025-04-16T16:29:53.615706Z — Message 19/28
Is that file listing you sent earlier 100% of the files?
[Dragonforce] — 2025-04-16T16:39:40.995198Z — Message 20/28
This is the list that we have decided to share with you.
[Ab0404E049514B50] — 2025-04-17T01:53:31.530191Z — Message 21/28
What percentage is it?
[Dragonforce] — 2025-04-17T01:54:35.954113Z — Message 22/28
This is the list that we have decided to share with you.
[Ab0404E049514B50] — 2025-04-17T15:43:03.343335Z — Message 23/28
That is a lot of money when we don't know everything you have
[Dragonforce] — 2025-04-17T15:51:09.306020Z — Message 24/28
You have been provided with the necessary information. You can also see the countdown timer. Upon completion, the data will be published, and the decryption program will be deleted. You will not be able to recover data from recovery companies. After the timer expires, the decryptor will actually be deleted, and it will not be available for any money. These are standard terms and conditions, and you know it. The situation can be resolved quickly for the specified amount and continue working quietly. Think about it.
[Ab0404E049514B50] — 2025-04-17T18:48:28.757111Z — Message 25/28
Is there any wiggle room in the amount? That would be a lot to try to produce by the time the timer reaches zero.
[Dragonforce] — 2025-04-17T18:51:53.813026Z — Message 26/28
Abstract conversation does not lead to success. Name the amount and the due date. And we will discuss it with you.
[Ab0404E049514B50] — 2025-04-18T19:28:05.857541Z — Message 27/28
We are having internal conversations here but it would be helpful for you all to give us a better starting point on the price
[Dragonforce] — 2025-04-18T19:32:21.405713Z — Message 28/28
Starting point 500 000$