Overview

overview

10

Static

static

226a723ffb...f2.exe

windows7_x64

10

226a723ffb...f2.exe

windows10_x64

10

Analysis

  • max time kernel
    84s
  • max time network
    9s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    22/11/2020, 00:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    226a723ffb4a91d9950a8b266167c5b354ab0db1dc225578494917fe53867ef2.exe
  • Size 200KB
  • Sample201122-a14ms1r5dj
  • SHA256 226a723ffb4a91d9950a8b266167c5b354ab0db1dc225578494917fe53867ef2
  • MD5 SHA1 SHA512
Score
10/10
mountlockerpersistenceransomware

Malware Config

Signatures

  • MountLocker Ransomware

    Ransomware family first seen in late 2020, which threatens to leak files if ransom is not paid.

    ransomwaremountlocker
  • Deletes shadow copies 2 TTPs

    Ransomware often targets backup files to inhibit system recovery.

    ransomware
  • Modifies extensions of user files 9 IoCs

    Ransomware generally changes the extension on encrypted files.

    ransomware
  • Deletes itself 1 IoCs
  • Drops desktop.ini file(s) 29 IoCs
  • Modifies service 2 TTPs 4 IoCs
    persistence
  • Drops file in Program Files directory 9149 IoCs