Iron Locker
Tags
| attack-pattern: | Data Direct Msbuild - T1127.001 Server - T1583.004 Server - T1584.004 |
Common Information
| Type | Value |
|---|---|
| UUID | cc8d256f-d500-4f2c-b950-c1809b22620d |
| Fingerprint | 26e1127a40ed2fba |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | April 10, 2018, 12:30 p.m. |
| Added to db | Sept. 26, 2022, 9:32 a.m. |
| Last updated | Nov. 17, 2024, 6:49 p.m. |
| Headline | Шифровальщики-вымогатели The Digest "Crypto-Ransomware" |
| Title | Iron Locker |
| Detected Hints/Tags/Attributes | 61/1/20 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | http://id-ransomware.blogspot.com/2018/04/ironlocker-ransomware.html |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | y5mogzal2w25p6bn.ml |
|
| Details | Domain | 54 | mail2tor.com |
|
| Details | Domain | 27 | coincafe.com |
|
| Details | Domain | 162 | localbitcoins.com |
|
| Details | Domain | 23 | btcdirect.eu |
|
| Details | Domain | 2 | coinrnr.com |
|
| Details | Domain | 11 | bitquick.co |
|
| Details | Domain | 7 | myip.dnsomatic.com |
|
| Details | Domain | 272 | outlook.com |
|
| Details | Domain | 911 | any.run |
|
| Details | Domain | 1 | vfk2k5s5tfjr27tz.tk |
|
| Details | 1 | oldblackjack@outlook.com |
||
| Details | File | 7 | help_your_files.html |
|
| Details | File | 1 | ironunlocker.exe |
|
| Details | File | 1 | 5acf9aad008a15062d3685f4.key |
|
| Details | File | 131 | tar.gz |
|
| Details | File | 351 | recycle.bin |
|
| Details | File | 1 | iron_locker.exe |
|
| Details | IPv4 | 1 | 67.215.92.215 |
|
| Details | IPv4 | 1 | 104.31.69.125 |