+l9fp:"831cb76b8e05df466742d7ef48acda86540ea3b0540ea3b0540ea3b0540ea3b0"
Indices: 2, document count: 36502, size: 3.9 MB
Found index read_me with 1 documents (4.5 kB)
Found index gts_usage_onpremise with 36501 document...
Ransom notes :
{"@timestamp": "2099-11-15T13:12:00", "message": "All indexs has been dropped. But we backup all indexs. The only method of recoveribing database is to pay 0.021 BTC. Transfer to this BTC address 15BdJyWiWRcNQY4xBuhJrmjqz7ZQD6zAcT . You can buy bitcoin here, does not take much time to buy https://localbitcoins.com or https://buy.moonpay.io/ . After paying write to me in the mail with your DB IP: recmydata@onionmail.org and you will receive a link to download your database dump.\n"}
Analysis helper :
estk --url=http://61.74.61.57:9200 list
Found by ElasticSearchOpenPlugin