Static task
static1
Behavioral task
behavioral1
Sample
B.exe
Resource
win7-en-20211014
Behavioral task
behavioral2
Sample
B.exe
Resource
win10-en-20210920
Behavioral task
behavioral3
Sample
Build.exe
Resource
win7-en-20211014
Behavioral task
behavioral4
Sample
Build.exe
Resource
win10-en-20210920
Behavioral task
behavioral5
Sample
READ.exe
Resource
win7-en-20211014
Behavioral task
behavioral6
Sample
READ.exe
Resource
win10-en-20210920
Behavioral task
behavioral7
Sample
rb.exe
Resource
win7-en-20211014
Behavioral task
behavioral8
Sample
rb.exe
Resource
win10-en-20210920
General
-
Target
a.zip
-
Size
1.1MB
-
MD5
05bda4bb2537515927645759f4492004
-
SHA1
fe892cd96ac631a15b9cbc93acfee9bb857ff4c5
-
SHA256
34601e5edf184f46c37314559e0a361cbce3aadc451e09f8b84020232fa710ad
-
SHA512
b0e5708bf3c9fdc7cbb137985f6766b2c654de790fc909d0785a94101640dcd1628414b9fc71f58682ebd4a8736358b6218a1597be57bd27595e48e54dee9b29
Malware Config
Signatures
-
MedusaLocker Payload 4 IoCs
Processes:
resource yara_rule static1/unpack001/B.exe family_medusalocker static1/unpack001/Build.exe family_medusalocker static1/unpack001/READ.exe family_medusalocker static1/unpack001/rb.exe family_medusalocker -
Medusalocker family
Files
-
a.zip.zip
-
B.exe.exe windows x86
-
Build.exe.exe windows x86
-
READ.exe.exe windows x86
-
rb.exe.exe windows x86