Overview

overview

10

Static

static

10

187610fb06...in.exe

windows7_x64

10

187610fb06...in.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    187610fb06cc60c73c0062b593c5fe3ba29e0436e396969feb9ed25391ff7e8b.bin

  • Size

    47KB

  • Sample

    210512-aa1jsrrs3s

  • MD5

    4caacde2df87777bca7860018f37edec

  • SHA1

    ef99230e52d5f56a3681bf3155fe7c4b56baeb84

  • SHA256

    187610fb06cc60c73c0062b593c5fe3ba29e0436e396969feb9ed25391ff7e8b

  • SHA512

    315f67986a0c5cc9ac2275f757671982dff7f3edc8be1d1a25920c5a481a089face523cbbf333d9edcf3838d73e08bfa12aae8318a9256c1c468c55a12482fab

Score
10/10
mountlockerransomware

Malware Config

Targets

    • Target

      187610fb06cc60c73c0062b593c5fe3ba29e0436e396969feb9ed25391ff7e8b.bin

    • Size

      47KB

    • MD5

      4caacde2df87777bca7860018f37edec

    • SHA1

      ef99230e52d5f56a3681bf3155fe7c4b56baeb84

    • SHA256

      187610fb06cc60c73c0062b593c5fe3ba29e0436e396969feb9ed25391ff7e8b

    • SHA512

      315f67986a0c5cc9ac2275f757671982dff7f3edc8be1d1a25920c5a481a089face523cbbf333d9edcf3838d73e08bfa12aae8318a9256c1c468c55a12482fab

    Score
    10/10
    mountlockerransomware

    • MountLocker Ransomware

      Ransomware family first seen in late 2020, which threatens to leak files if ransom is not paid.

      ransomwaremountlocker

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Deletes itself

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks