quantum | bb6ec92275ec00a69b2c6e0532509222093d7026c8766274a69d985bcc1eb65e

General

Target

bb6ec92275ec00a69b2c6e0532509222093d7026c8766274a69d985bcc1eb65e
Size

75KB
Sample

230222-epxfksbf4t
MD5

c53e027bf91d7e8c8da245ccd28279e5
SHA1

4d1fb9ab277f997a63cd42fd76467715b67579e4
SHA256

bb6ec92275ec00a69b2c6e0532509222093d7026c8766274a69d985bcc1eb65e
SHA512

5444f4b9737639dcf3321ae8d8ecea2e8865de3acae50a054136d741911371b4102b7a7f47a66d15d08c63022cb1afd3c00ee3241bb8be38ccfd8adda53a674a
SSDEEP

1536:9aX51pVH9hsgNGLs6BLM1frxz/HTfcKKBaJGff:OfJGLs6BwNxnfTKsGff

Score

10^/10

quantum ransomware

Malware Config

Extracted

Path

C:\Users\Admin\Desktop\README_TO_DECRYPT.html

Ransom Note

ALL YOUR DATA IS ENCRYPTED by QUANTUM What happened? All your files are encrypted on all devices across the network Huge volume of your data including financial, customer, partner and employees data was downloaded to our internal servers What's next? If you don't get in touch with us next 48 hours, we'll start publishing your data to the Data Leaks Portal / TOR Data Leaks Portal How do I recover? There is no way to decrypt your files manually unless we provide a special decryption tool Please download TOR browser and CONTACT US for further instructions Hours Minutes Seconds

Targets

- Target
  
  bb6ec92275ec00a69b2c6e0532509222093d7026c8766274a69d985bcc1eb65e
- Size
  
  75KB
- MD5
  
  c53e027bf91d7e8c8da245ccd28279e5
- SHA1
  
  4d1fb9ab277f997a63cd42fd76467715b67579e4
- SHA256
  
  bb6ec92275ec00a69b2c6e0532509222093d7026c8766274a69d985bcc1eb65e
- SHA512
  
  5444f4b9737639dcf3321ae8d8ecea2e8865de3acae50a054136d741911371b4102b7a7f47a66d15d08c63022cb1afd3c00ee3241bb8be38ccfd8adda53a674a
- SSDEEP
  
  1536:9aX51pVH9hsgNGLs6BLM1frxz/HTfcKKBaJGff:OfJGLs6BwNxnfTKsGff
Score

10^/10

quantum ransomware
- Quantum Ransomware
  A rebrand of the MountLocker ransomware first seen in August 2021.
  ransomware quantum
- Modifies extensions of user files
  Ransomware generally changes the extension on encrypted files.
  ransomware
- Deletes itself
- Drops desktop.ini file(s)
behavioral1 behavioral2