Overview

overview

10

Static

static

43064ebb9f...00.exe

windows7_x64

10

43064ebb9f...00.exe

windows10_x64

8

Resubmissions

21/04/2021, 05:57

210421-6629fr1gja10

20/04/2021, 23:42

210420-mt2kpcnwbx10

20/04/2021, 23:39

210420-4kmcwg1k3a10

Sharing

Copy URL Twitter E-mail

General

  • Target
    43064ebb9fccce989e8a8ebe2e8ee5df154b55f7b94d933e0cf7dba6ac765f00.exe
  • Size 4.5MB
  • Sample210421-6629fr1gja
  • SHA256 43064ebb9fccce989e8a8ebe2e8ee5df154b55f7b94d933e0cf7dba6ac765f00
  • MD5 SHA1 SHA512
Score
10/10
mountlockerransomware

Malware Config

Targets

    • Target
      43064ebb9fccce989e8a8ebe2e8ee5df154b55f7b94d933e0cf7dba6ac765f00.exe
    • Size 4.5MB
    • SHA256 43064ebb9fccce989e8a8ebe2e8ee5df154b55f7b94d933e0cf7dba6ac765f00
    • MD5 SHA1 SHA512
    Score
    10/10
    mountlockerransomware

    • MountLocker Ransomware

      Ransomware family first seen in late 2020, which threatens to leak files if ransom is not paid.

      ransomwaremountlocker

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomware

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks