quantum | 1854def3463ceba21ad0d86592424845ce932e826419525bbbc543682fd2f9c9

General

Target

1854def3463ceba21ad0d86592424845ce932e826419525bbbc543682fd2f9c9
Size

75KB
Sample

230222-enxpysbf3y
MD5

47f3e71a1b1eb4a939d5f17639514334
SHA1

d0c6afe81342ee81389864791c67e9b29e2939f2
SHA256

1854def3463ceba21ad0d86592424845ce932e826419525bbbc543682fd2f9c9
SHA512

26744d0164366fa3786f449b9fb0971c57b5b526e2cfff907e4077c1e6337c4a9ff7529248fae084b68a6abbc11a68b6ccda6d01b1dfb1526e3bcd4dd6f209fa
SSDEEP

1536:9aX51pVH9hsgNGLs6BLM1frxz/HTfcKKBaJGbf:OfJGLs6BwNxnfTKsGbf

Score

10^/10

quantum ransomware

Malware Config

Extracted

Path

C:\Users\Admin\Desktop\README_TO_DECRYPT.html

Ransom Note

ALL YOUR DATA IS ENCRYPTED by QUANTUM What happened? All your files are encrypted on all devices across the network Huge volume of your data including financial, customer, partner and employees data was downloaded to our internal servers What's next? If you don't get in touch with us next 48 hours, we'll start publishing your data to the Data Leaks Portal / TOR Data Leaks Portal How do I recover? There is no way to decrypt your files manually unless we provide a special decryption tool Please download TOR browser and CONTACT US for further instructions Hours Minutes Seconds

Targets

- Target
  
  1854def3463ceba21ad0d86592424845ce932e826419525bbbc543682fd2f9c9
- Size
  
  75KB
- MD5
  
  47f3e71a1b1eb4a939d5f17639514334
- SHA1
  
  d0c6afe81342ee81389864791c67e9b29e2939f2
- SHA256
  
  1854def3463ceba21ad0d86592424845ce932e826419525bbbc543682fd2f9c9
- SHA512
  
  26744d0164366fa3786f449b9fb0971c57b5b526e2cfff907e4077c1e6337c4a9ff7529248fae084b68a6abbc11a68b6ccda6d01b1dfb1526e3bcd4dd6f209fa
- SSDEEP
  
  1536:9aX51pVH9hsgNGLs6BLM1frxz/HTfcKKBaJGbf:OfJGLs6BwNxnfTKsGbf
Score

10^/10

quantum ransomware
- Quantum Ransomware
  A rebrand of the MountLocker ransomware first seen in August 2021.
  ransomware quantum
- Modifies extensions of user files
  Ransomware generally changes the extension on encrypted files.
  ransomware
- Deletes itself
- Drops desktop.ini file(s)
behavioral1 behavioral2