Static task
static1
Behavioral task
behavioral1
Sample
4a5ac3c6f8383cc33c795804ba5f7f5553c029bbb4a6d28f1e4d8fb5107902c1.exe
Resource
win7v20210410
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
4a5ac3c6f8383cc33c795804ba5f7f5553c029bbb4a6d28f1e4d8fb5107902c1.exe
Resource
win10v20210410
windows10_x64
0 signatures
0 seconds
General
-
Target
mountlocker.zip
-
Size
24KB
-
MD5
e675db198b6396839c0c4baa6dc6a5c7
-
SHA1
4a8dd234de0c13eb7b5fcbf8b3eaac903398793a
-
SHA256
1906d011f27492072b8f063e136ccf12b14a7a79b6630953ca3f0b955a07a874
-
SHA512
c9cd5529fd08c05521332a0686c8633c817f398691076e640c14581e30a2cfee61d916b1c9ca80025b4578aa135ede351ea3d27402d287ef85dbd6c264fa16f9
Score
10/10
Malware Config
Signatures
-
Detected Mount Locker ransomware 1 IoCs
Processes:
resource yara_rule static1/unpack001/4a5ac3c6f8383cc33c795804ba5f7f5553c029bbb4a6d28f1e4d8fb5107902c1 RANSOM_mountlocker -
Mountlocker family
Files
-
mountlocker.zip.zip
Password: infected
-
4a5ac3c6f8383cc33c795804ba5f7f5553c029bbb4a6d28f1e4d8fb5107902c1.exe windows x64