quantum | c227041d6e889f67413f2e669e1a8c027dfa1c6f40e13889faaee3cd87633cd5

General

Target

c227041d6e889f67413f2e669e1a8c027dfa1c6f40e13889faaee3cd87633cd5
Size

75KB
Sample

230228-e9j1zshe93
MD5

043d54316b201b92d11df5a5ac76d104
SHA1

b0b49a9bd4de2f3fa56a4faf612303e68878f751
SHA256

c227041d6e889f67413f2e669e1a8c027dfa1c6f40e13889faaee3cd87633cd5
SHA512

2a2e63af63d99bc3c0fc27ac6309b57998a4d91355ce680b52faa3447760230cbdebc74e8f8c1bd87957c572a96fb7abf72ed0283744fa929d71213bcb403382
SSDEEP

1536:9aX51pVH9hsgNGLs6BLM1frxz/HTfcKKBaJG/m6Fcr:OfJGLs6BwNxnfTKsGZc

Score

10^/10

quantum ransomware

Malware Config

Extracted

Path

C:\Users\Admin\Desktop\README_TO_DECRYPT.html

Ransom Note

ALL YOUR DATA IS ENCRYPTED by QUANTUM What happened? All your files are encrypted on all devices across the network Huge volume of your data including financial, customer, partner and employees data was downloaded to our internal servers What's next? If you don't get in touch with us next 48 hours, we'll start publishing your data to the Data Leaks Portal / TOR Data Leaks Portal How do I recover? There is no way to decrypt your files manually unless we provide a special decryption tool Please download TOR browser and CONTACT US for further instructions Hours Minutes Seconds

Targets

- Target
  
  c227041d6e889f67413f2e669e1a8c027dfa1c6f40e13889faaee3cd87633cd5
- Size
  
  75KB
- MD5
  
  043d54316b201b92d11df5a5ac76d104
- SHA1
  
  b0b49a9bd4de2f3fa56a4faf612303e68878f751
- SHA256
  
  c227041d6e889f67413f2e669e1a8c027dfa1c6f40e13889faaee3cd87633cd5
- SHA512
  
  2a2e63af63d99bc3c0fc27ac6309b57998a4d91355ce680b52faa3447760230cbdebc74e8f8c1bd87957c572a96fb7abf72ed0283744fa929d71213bcb403382
- SSDEEP
  
  1536:9aX51pVH9hsgNGLs6BLM1frxz/HTfcKKBaJG/m6Fcr:OfJGLs6BwNxnfTKsGZc
Score

10^/10

quantum ransomware
- Quantum Ransomware
  A rebrand of the MountLocker ransomware first seen in August 2021.
  ransomware quantum
- Modifies extensions of user files
  Ransomware generally changes the extension on encrypted files.
  ransomware
- Deletes itself
- Drops desktop.ini file(s)
behavioral1 behavioral2