New PwndLocker Ransomware Targeting U.S. Cities, Enterprises
Tags
country: Serbia
attack-pattern: Data Msbuild - T1127.001 Server - T1583.004 Server - T1584.004 Software - T1592.002
Show in Graph
Common Information
Type Value
UUID d7117197-bd61-4505-887d-d5293be0542d
Fingerprint 154720792169305a
Analysis status DONE
Considered CTI value 0
Text language
Published March 2, 2020, midnight
Added to db Sept. 26, 2022, 9:31 a.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline New PwndLocker Ransomware Targeting U.S. Cities, Enterprises
Title New PwndLocker Ransomware Targeting U.S. Cities, Enterprises
Detected Hints/Tags/Attributes 41/2/10
Source URLs
Redirection Url
Details Source https://www.bleepingcomputer.com/news/security/new-pwndlocker-ransomware-targeting-us-cities-enterprises/
URL Provider
Details Provider Source level domain
Details bleepingcomputer.com www.bleepingcomputer.com
Attributes
Details Type #Events CTI Value
Details Domain 285 
microsoft.net
Details Domain 179 
www.torproject.org
Details Domain 2 
ax3spapdymip4jpy.onion
Details Domain 11 
xxx.com
Details Email 1 
xxx@xxx.com
Details File 345 
vssadmin.exe
Details File 351 
recycle.bin
Details File 3 
h0w_t0_rec0very_files.txt
Details File 2 
c:\programdata\lock.xml
Details Url 24 
https://www.torproject.org/download