medusalocker | ZL2[.]ex_[.]zip | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ZL2.ex_.zip
Size 283KB
Sample211208-swvr8agaf5
SHA256 ca4669b91943c9d5df3dd06f6733fe237cf155f45252a6061e87141fed9fcc3e
MD5 a8f12c77118df1355f19698484ada35b
SHA1 b7074ff198347f27485889d62a67b75f3d6894a2
SHA512 885166cfd88afb8d99249353b8fb18b79adad27993795e083ac82728e5195a0dc519ea598706c2117666fd57ab62890d19c6a6f022adfd5055315bb530aa0792
MD5 SHA1 SHA512

Score

10^/10

medusalocker

Malware Config

Signatures

MedusaLocker Payload 1 IoCs

resource	yara_rule
static1/unpack001/ZL2.ex_	family_medusalocker

Medusalocker family
medusalocker

File Explorer

ZL2.ex_.zip

.zip 283KB
ZL2.ex_

.exe 669KB

ZL2.ex_.zip

SHA256 ca4669b91943c9d5df3dd06f6733fe237cf155f45252a6061e87141fed9fcc3e
MD5 a8f12c77118df1355f19698484ada35b
SHA1 b7074ff198347f27485889d62a67b75f3d6894a2
SHA512 885166cfd88afb8d99249353b8fb18b79adad27993795e083ac82728e5195a0dc519ea598706c2117666fd57ab62890d19c6a6f022adfd5055315bb530aa0792
MD5 SHA1 SHA512

Password

infected