General
- Target c227041d6e889f67413f2e669e1a8c027dfa1c6f40e13889faaee3cd87633cd5
- Size 75KB
- Sample230228-e9j1zshe93
- SHA256 c227041d6e889f67413f2e669e1a8c027dfa1c6f40e13889faaee3cd87633cd5
Score
10/10
Malware Config
Extracted
Path
-
C:\Users\Admin\Desktop\README_TO_DECRYPT.html
Ransom Note
- ALL YOUR DATA IS ENCRYPTED by QUANTUM What happened? All your files are encrypted on all devices across the network Huge volume of your data including financial, customer, partner and employees data was downloaded to our internal servers What's next? If you don't get in touch with us next 48 hours, we'll start publishing your data to the Data Leaks Portal / TOR Data Leaks Portal How do I recover? There is no way to decrypt your files manually unless we provide a special decryption tool Please download TOR browser and CONTACT US for further instructions Hours Minutes Seconds
Targets
-
- Target c227041d6e889f67413f2e669e1a8c027dfa1c6f40e13889faaee3cd87633cd5
- Size 75KB
- SHA256 c227041d6e889f67413f2e669e1a8c027dfa1c6f40e13889faaee3cd87633cd5
Score10/10-
Quantum Ransomware
A rebrand of the MountLocker ransomware first seen in August 2021.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Deletes itself
-
Drops desktop.ini file(s)