General
-
Target
2bbc1a4cc2e10cac8860b033c2b7fe6b444dd8ceb7650943979f72b8c48c4fe4
-
Size
8.2MB
-
MD5
e96b1d4cda0124f14f5663c9736b3351
-
SHA1
3000fee8ee18f770ee5720835df56c0d72aa2849
-
SHA256
2bbc1a4cc2e10cac8860b033c2b7fe6b444dd8ceb7650943979f72b8c48c4fe4
-
SHA512
463374c008fca8d1559c61de34f48a333cda85e59475c5110325e385d013203fda6393fb86d3933b8fd8e394b3d9053d575d617e450430f71a0e2eed9f319eae
-
SSDEEP
49152:CSFFCwJFY83N8qs6kGsixnnZQTCJylpNops6kz7qFfaJDMkvsE69y2zkWF:xRJ1KhGtn+TG8pNu6A9DQ6
Score
10/10
Malware Config
Signatures
-
Detected Mount Locker ransomware 1 IoCs
-
Detected SUNBURST backdoor 1 IoCs
SUNBURST is a backdoor for the SolarWinds Orion platform with extensive capabilities.
-
GandCrab Payload 1 IoCs
-
Gandcrab family
-
Mountlocker family
-
Sunburst family
-
XMRig Miner Payload 1 IoCs
-
Xmrig family
Files
-
2bbc1a4cc2e10cac8860b033c2b7fe6b444dd8ceb7650943979f72b8c48c4fe4
Headers
Sections