LanRan Ranosmware - IOC - File Details


1) Ransomware Name - LanRan

2) Encrypted Extensions - NA

3) Ransom Note File -
@__help__@
lan.exe
<random>.exe

4) Encrypted Algorithm - AES / RSA, RSA-2048

5) Decryptor Link - NA

6) Screenshot -

7) Indicators of Compromise - Email: lanran-decrypter@list.ru

8) File Details -
MD5 05c95cefcc2292424ffc1aff84215a4e
SHA1 83eeb67e6deaa063979aa5bbde7e9d9eeabab577
SHA256 875a6185aa50896f96a40c75005c849b320ef27f7332e7a2c0c2c1d3d55faff0
ssdeep6144: 8fkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk4: 8fkkkkkkkkkkkkkkkkkkkkkkkkkkkkkL
authentihash  3b0ee0c5785413994d3c42f0f5c3c7d8d60591c80467afa532cb0bcebb07ab66
imphash  f34d5f2d4577ed6d9ceec516c1f5a744
The size of the file is 197.5 KB (202240 bytes)
Win32 EXE file type
DescriptionPE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono / .Net assembly

MD5 3273438de838bc9b630ed2f032a6ee0b
SHA1 e5cd6355f867d4ab24f14905525ac0cfc0b5dc49
SHA256 0e1577001fd5c5a2fe5ad9f8f88fec37caf1389dc2fd4e25c56bb7e5f426cb41
ssdeep1536: B81b189BMa9clj9EvVdmKx9nvYPDRx + zZZ1ZHZZZZZZZZZE1ZHhiDJRDV: Oa9BDlvVNxxKDRozZZ1ZHZZZZZZZZZEO
authentihash  18e5cfb66c7d53357fc7226d4dcecd759a61d4a01b240301fb7719806e18b724
imphash  f34d5f2d4577ed6d9ceec516c1f5a744
The size of the file le Details - is 90.0 KB (92160 bytes)
Win32 EXE file type
DescriptionPE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono / .Net assembly


MD5 1b3985282cef9d022dba3440bb21451d
SHA1 d7a0d31ab0be2a27df6254090992b4dfadf0d8f3
SHA256 da7fbe88aad77aa27f268865af3def5dc1c9ab643143471ebbc28495ed8f8b99
ssdeep1536: Lwt0glWyrDpewnC4vY8p / RBjT98Fwn + lZVctam8zoc: LwtFw0DEwVvY8p / PT98mMo5h
authentihash  9f52d48b7d0a320003abd94c836bc5ed8da3e2d9e5e160ad6423d5a2a51ba683
imphash  f34d5f2d4577ed6d9ceec516c1f5a744
The size of the file is 106.5 KB (109056 bytes)
Win32 EXE file type
DescriptionPE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono / .Net assembly

Comments