Overview

overview

10

Static

static

10

6143d920eb...in.dll

windows7_x64

8

6143d920eb...in.dll

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6143d920ebdd5e9b1db7425916417c0896139f425493a8fcd63d62dac80779f1.bin

  • Size

    66KB

  • Sample

    220109-rne65adee3

  • MD5

    cac54670bc5a9fa936487640a718c269

  • SHA1

    20f802801a424e2a57ff21e048734fe21f0c57c0

  • SHA256

    6143d920ebdd5e9b1db7425916417c0896139f425493a8fcd63d62dac80779f1

  • SHA512

    deb19457c7dbc5e865a919936dd9178f80722835fbce4d9f105ce5e6bb4afd8a56dc7b4bb6d3e4b902f88e5321d98ac4daeaa2027e88a3cc4c69d7566fdf1ffe

Score
10/10
mountlockerransomware

Malware Config

Targets

    • Target

      6143d920ebdd5e9b1db7425916417c0896139f425493a8fcd63d62dac80779f1.bin

    • Size

      66KB

    • MD5

      cac54670bc5a9fa936487640a718c269

    • SHA1

      20f802801a424e2a57ff21e048734fe21f0c57c0

    • SHA256

      6143d920ebdd5e9b1db7425916417c0896139f425493a8fcd63d62dac80779f1

    • SHA512

      deb19457c7dbc5e865a919936dd9178f80722835fbce4d9f105ce5e6bb4afd8a56dc7b4bb6d3e4b902f88e5321d98ac4daeaa2027e88a3cc4c69d7566fdf1ffe

    Score
    8/10
    ransomware

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Deletes itself

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks