General

  • Target

    2bbc1a4cc2e10cac8860b033c2b7fe6b444dd8ceb7650943979f72b8c48c4fe4

  • Size

    8.2MB

  • MD5

    e96b1d4cda0124f14f5663c9736b3351

  • SHA1

    3000fee8ee18f770ee5720835df56c0d72aa2849

  • SHA256

    2bbc1a4cc2e10cac8860b033c2b7fe6b444dd8ceb7650943979f72b8c48c4fe4

  • SHA512

    463374c008fca8d1559c61de34f48a333cda85e59475c5110325e385d013203fda6393fb86d3933b8fd8e394b3d9053d575d617e450430f71a0e2eed9f319eae

  • SSDEEP

    49152:CSFFCwJFY83N8qs6kGsixnnZQTCJylpNops6kz7qFfaJDMkvsE69y2zkWF:xRJ1KhGtn+TG8pNu6A9DQ6

Malware Config

Signatures

  • Detected Mount Locker ransomware 1 IoCs
  • Detected SUNBURST backdoor 1 IoCs

    SUNBURST is a backdoor for the SolarWinds Orion platform with extensive capabilities.

  • GandCrab Payload 1 IoCs
  • Gandcrab family
  • Mountlocker family
  • Sunburst family
  • XMRig Miner Payload 1 IoCs
  • Xmrig family

Files

  • 2bbc1a4cc2e10cac8860b033c2b7fe6b444dd8ceb7650943979f72b8c48c4fe4
    .dll windows x86


    Headers

    Sections