General
- Target 8fe49892d510470e049d8c2e5523fa1841b20ccc89406fd91055950f90a5eede
- Size 75KB
- Sample230301-rpcgmage43
- SHA256 8fe49892d510470e049d8c2e5523fa1841b20ccc89406fd91055950f90a5eede
Score
10/10
Malware Config
Extracted
Path
-
C:\Users\Admin\Desktop\README_TO_DECRYPT.html
Ransom Note
- ALL YOUR DATA IS ENCRYPTED by QUANTUM What happened? All your files are encrypted on all devices across the network Huge volume of your data including financial, customer, partner and employees data was downloaded to our internal servers What's next? If you don't get in touch with us next 48 hours, we'll start publishing your data to the Data Leaks Portal How do I recover? There is no way to decrypt your files manually unless we provide a special decryption tool Please download TOR browser and CONTACT US for further instructions Hours Minutes Seconds
Targets
-
- Target 8fe49892d510470e049d8c2e5523fa1841b20ccc89406fd91055950f90a5eede
- Size 75KB
- SHA256 8fe49892d510470e049d8c2e5523fa1841b20ccc89406fd91055950f90a5eede
Score10/10Quantum Ransomware
A rebrand of the MountLocker ransomware first seen in August 2021.
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
Deletes itself
Drops desktop.ini file(s)