mountlocker | e7c277aae66085f1e0c4789fe51cac50e3ea86d79c8a242ffc066ed0b0548037

Resubmissions

21/11/2020, 16:12 UTC

201121-3vsypzcqyx 10

21/11/2020, 15:12 UTC

201121-c152v5zkxx 10

Sharing

Copy URL

Twitter E-mail

General

Target

e7c277aae66085f1e0c4789fe51cac50e3ea86d79c8a242ffc066ed0b0548037.bin
Size

532KB
Sample

201121-c152v5zkxx
MD5

76f547c793b5478b970c64caf04d01d4
SHA1

f9eb40f6d3d4c83852e3781886db762bef8564e0
SHA256

e7c277aae66085f1e0c4789fe51cac50e3ea86d79c8a242ffc066ed0b0548037
SHA512

91e91a8b693cb253f281411260611a221a113b342eaa642a9d6597aaf86c138ee2aa28ade10218a814ae34016e6d70824e36786497476ab704defddf60e33e17

Score

10^/10

Malware Config

Targets

- Target
  
  e7c277aae66085f1e0c4789fe51cac50e3ea86d79c8a242ffc066ed0b0548037.bin
- Size
  
  532KB
- MD5
  
  76f547c793b5478b970c64caf04d01d4
- SHA1
  
  f9eb40f6d3d4c83852e3781886db762bef8564e0
- SHA256
  
  e7c277aae66085f1e0c4789fe51cac50e3ea86d79c8a242ffc066ed0b0548037
- SHA512
  
  91e91a8b693cb253f281411260611a221a113b342eaa642a9d6597aaf86c138ee2aa28ade10218a814ae34016e6d70824e36786497476ab704defddf60e33e17
Score

10^/10

mountlocker persistence ransomware
- MountLocker Ransomware
  Ransomware family first seen in late 2020, which threatens to leak files if ransom is not paid.
  ransomware mountlocker
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware
- Modifies extensions of user files
  Ransomware generally changes the extension on encrypted files.
  ransomware
- Deletes itself
- Drops desktop.ini file(s)
- Modifies service
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

T1158

Modify Existing Service

T1031

Privilege Escalation

Defense Evasion

File Deletion

T1107

Hidden Files and Directories

T1158

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MountLocker Ransomware

Deletes shadow copies

Modifies extensions of user files

Deletes itself

Drops desktop.ini file(s)

Modifies service

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2

We care about your privacy.