General
-
Target
b07e554eff514d0dd77f3cf52e011fe315c21054053032a64c70699fe5336894.bin.sample
-
Size
118KB
-
Sample
210331-9dw4tmxfrj
-
MD5
2f21dd9d6c0862dad443a5c95420816f
-
SHA1
ab888a86691db3a013d97e38865cb5f289e30e65
-
SHA256
b07e554eff514d0dd77f3cf52e011fe315c21054053032a64c70699fe5336894
-
SHA512
ffce995792446ac40c4f1bc3da86363fb892da7b2a9d673f328b9cf9bb4a7dc9d134a26cdb472aefeeb9d6afcdc2a39107c90c286a30837fb168998c6f9de24b
Static task
static1
Behavioral task
behavioral1
Sample
b07e554eff514d0dd77f3cf52e011fe315c21054053032a64c70699fe5336894.bin.sample.dll
Resource
win7v20201028
Behavioral task
behavioral2
Sample
b07e554eff514d0dd77f3cf52e011fe315c21054053032a64c70699fe5336894.bin.sample.dll
Resource
win10v20201028
Malware Config
Extracted
C:\Users\Public\Desktop\RecoveryManual.html
http://7bzo3bkpgrm3n4g6ot3jtc45tna7ijw2ibtfcuwnfj44zwfjwfrvszyd.onion/?cid=143ca1749b19662fa0c035df8eb6ae507432c1b80ecc80a211b3e4dd1349bb49
Targets
-
-
Target
b07e554eff514d0dd77f3cf52e011fe315c21054053032a64c70699fe5336894.bin.sample
-
Size
118KB
-
MD5
2f21dd9d6c0862dad443a5c95420816f
-
SHA1
ab888a86691db3a013d97e38865cb5f289e30e65
-
SHA256
b07e554eff514d0dd77f3cf52e011fe315c21054053032a64c70699fe5336894
-
SHA512
ffce995792446ac40c4f1bc3da86363fb892da7b2a9d673f328b9cf9bb4a7dc9d134a26cdb472aefeeb9d6afcdc2a39107c90c286a30837fb168998c6f9de24b
Score10/10-
MountLocker Ransomware
Ransomware family first seen in late 2020, which threatens to leak files if ransom is not paid.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Deletes itself
-
Drops desktop.ini file(s)
-