When Viruses Mutate: SunCrypt Ransomware Evolves from QNAPCrypt
Tags
country: Belgium Germany France Jersey Spain Kyrgyzstan Russia Syria
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Ssh - T1021.004 Web Shell - T1505.003 Tool - T1588.002 Connection Proxy - T1090 Web Shell - T1100
Show in Graph
Common Information
Type Value
UUID 7d610d84-c5b2-4477-b576-27d25cda7b87
Fingerprint b7368abbc66586d4
Analysis status DONE
Considered CTI value 2
Text language
Published March 2, 2021, 2:55 p.m.
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 17, 2024, 5:54 p.m.
Headline When Viruses Mutate: Did SunCrypt Ransomware Evolve from QNAPCrypt?
Title When Viruses Mutate: SunCrypt Ransomware Evolves from QNAPCrypt
Detected Hints/Tags/Attributes 84/2/7
Source URLs
Redirection Url
Details Source https://www.intezer.com/blog/malware-analysis/when-viruses-mutate-did-suncrypt-ransomware-evolve-from-qnapcrypt
URL Provider
Details Provider Source level domain
Details intezer.com www.intezer.com
Attributes
Details Type #Events CTI Value
Details Domain 95 
ip-api.com
Details Domain 14 
ipapi.co
Details Domain 1 
vie8hoos.xyz
Details md5 1 
5657abdb9d99cd5aec433099f8d6f53d
Details md5 1 
8dd59345cc034317630b2ac2ee19b362
Details md5 1 
516291d10b370c7be3863335cf5d57eb
Details IPv4 2 
192.99.206.61