a1082d01ede1f5fa700be2420ec96047a699d0579c15ddb2f54233a24ac3a7e9

Submit
Reports

Overview

overview

Static

static

07ba533a69...53.exe

windows7-x64

07ba533a69...53.exe

windows10-2004-x64

0e971ff0e7...8d.exe

windows7-x64

0e971ff0e7...8d.exe

windows10-2004-x64

111fb06de8...8b.exe

windows7-x64

111fb06de8...8b.exe

windows10-2004-x64

2de3cea3eb...a8.exe

windows7-x64

2de3cea3eb...a8.exe

windows10-2004-x64

327a2a4916...ca.exe

windows7-x64

327a2a4916...ca.exe

windows10-2004-x64

36c10a3e1f...d9.exe

windows7-x64

36c10a3e1f...d9.exe

windows10-2004-x64

67bf260c3e...10.exe

windows7-x64

67bf260c3e...10.exe

windows10-2004-x64

70ec1874cf...ac.exe

windows7-x64

70ec1874cf...ac.exe

windows10-2004-x64

817f5b0fcc...99.exe

windows7-x64

817f5b0fcc...99.exe

windows10-2004-x64

875a6185aa...f0.exe

windows7-x64

875a6185aa...f0.exe

windows10-2004-x64

887d386d2e...c6.exe

windows7-x64

887d386d2e...c6.exe

windows10-2004-x64

902afe35c6...16.exe

windows7-x64

902afe35c6...16.exe

windows10-2004-x64

97b6e51df2...0a.exe

windows7-x64

97b6e51df2...0a.exe

windows10-2004-x64

a4704be3a7...72.exe

windows7-x64

a4704be3a7...72.exe

windows10-2004-x64

b21f34ecfa...73.exe

windows7-x64

b21f34ecfa...73.exe

windows10-2004-x64

b75b3ff656...52.exe

windows7-x64

b75b3ff656...52.exe

windows10-2004-x64

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01-01-2024 14:50

Sharing

Copy URL

Twitter E-mail

Static task

static1

medusalocker

3 signatures

Behavioral task

behavioral1

Sample

07ba533a694e1733f8ef1c18ac191867382f4ca7a51244cda6ef5ec119fbfe53.exe

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

07ba533a694e1733f8ef1c18ac191867382f4ca7a51244cda6ef5ec119fbfe53.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

0e971ff0e7f4cd4714931ac6bb685d91e28b34070866c9e7c976817aa5f6eb8d.exe

Resource

win7-20231215-en

evasion ransomware spyware stealer

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral4

Sample

0e971ff0e7f4cd4714931ac6bb685d91e28b34070866c9e7c976817aa5f6eb8d.exe

Resource

win10v2004-20231215-en

evasion ransomware spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral5

Sample

111fb06de858ef843c882e40f34caf958054b0eeaeea877c49a23b1111916e8b.exe

Resource

win7-20231129-en

ransomware spyware stealer

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral6

Sample

111fb06de858ef843c882e40f34caf958054b0eeaeea877c49a23b1111916e8b.exe

Resource

win10v2004-20231215-en

ransomware spyware stealer

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral7

Sample

2de3cea3eb6eedbec7436f426a5259d4f65374b326823feee17175407f08e7a8.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

2de3cea3eb6eedbec7436f426a5259d4f65374b326823feee17175407f08e7a8.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

327a2a49164bc38c88a2d030ece9a7487b82e8a34d3f398e071654e5fcc4d7ca.exe

Resource

win7-20231215-en

evasion

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

327a2a49164bc38c88a2d030ece9a7487b82e8a34d3f398e071654e5fcc4d7ca.exe

Resource

win10v2004-20231215-en

evasion

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

36c10a3e1f93c4d50fb617ab7cd629bebea7ca5f827239ba98156ff88d27f7d9.exe

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

36c10a3e1f93c4d50fb617ab7cd629bebea7ca5f827239ba98156ff88d27f7d9.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

67bf260c3ea1e11df9c162b370cb5182d6d9d66392d90f11729c90e911404c10.exe

Resource

win7-20231129-en

evasion persistence spyware stealer

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

67bf260c3ea1e11df9c162b370cb5182d6d9d66392d90f11729c90e911404c10.exe

Resource

win10v2004-20231215-en

evasion persistence spyware stealer

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

70ec1874cf1304960c0b1b828216a22704caaff23ea514c1067efe9ce4b69aac.exe

Resource

win7-20231215-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

70ec1874cf1304960c0b1b828216a22704caaff23ea514c1067efe9ce4b69aac.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

817f5b0fcccda6756c485e463b3f0ea43bb894f866ce5cac9f7d1f065e3e1999.exe

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

817f5b0fcccda6756c485e463b3f0ea43bb894f866ce5cac9f7d1f065e3e1999.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral19

Sample

875a6185aa50896f96a40c75005c849b320ef27f7332e7a2c0c2c1d3d55faff0.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

875a6185aa50896f96a40c75005c849b320ef27f7332e7a2c0c2c1d3d55faff0.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

887d386d2ea9af0c079f4010311069045df5c51d658921b2c9de81c4378b4bc6.exe

Resource

win7-20231215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

887d386d2ea9af0c079f4010311069045df5c51d658921b2c9de81c4378b4bc6.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

902afe35c6ca794e8b436dad7edf142d2492abe3907055e4bd5e85ce6f617016.exe

Resource

win7-20231215-en

evasion persistence ransomware

windows7-x64

19 signatures

150 seconds

Behavioral task

behavioral24

Sample

902afe35c6ca794e8b436dad7edf142d2492abe3907055e4bd5e85ce6f617016.exe

Resource

win10v2004-20231222-en

evasion persistence ransomware

windows10-2004-x64

23 signatures

150 seconds

Behavioral task

behavioral25

Sample

97b6e51df2a1187481fa28ada65be40fb6d727e0fa3b40cc6796780d680b300a.exe

Resource

win7-20231215-en

spyware stealer

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

97b6e51df2a1187481fa28ada65be40fb6d727e0fa3b40cc6796780d680b300a.exe

Resource

win10v2004-20231215-en

spyware stealer

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

a4704be3a77f989693188a4a505b62719ffe87718f8891ab5d3e1de1b1a57572.exe

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

a4704be3a77f989693188a4a505b62719ffe87718f8891ab5d3e1de1b1a57572.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

b21f34ecfa7135153d506b3fde2a0d0bd23b44eccedc635cbfa474e321040273.exe

Resource

win7-20231215-en

persistence ransomware

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral30

Sample

b21f34ecfa7135153d506b3fde2a0d0bd23b44eccedc635cbfa474e321040273.exe

Resource

win10v2004-20231222-en

persistence ransomware

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral31

Sample

b75b3ff65632b65d1d641075bd2f5ed0ede93da3a35d7f50068b9371ee5c4552.exe

Resource

win7-20231129-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

b75b3ff65632b65d1d641075bd2f5ed0ede93da3a35d7f50068b9371ee5c4552.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target

2de3cea3eb6eedbec7436f426a5259d4f65374b326823feee17175407f08e7a8.exe
Size

464KB
MD5

79db8a12fc1a24a70c37c4cad0c29c6b
SHA1

ec6e79d2494862dd6cecbbd817926e282a6e2f4e
SHA256

2de3cea3eb6eedbec7436f426a5259d4f65374b326823feee17175407f08e7a8
SHA512

cbaf76ba0f245a103d3cfbd3cf3c78e353bee26931afdbde40c27355379ea9590e16aa430d9af82700fa8773cd4bb342cdfa73add60eab8ea549be7010d6f57f
SSDEEP

3072:KovCvStG1V1wisbM/OmsolxIrRuw+mqv9j1MWLQL:KqgRwLg/ODAx

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\2de3cea3eb6eedbec7436f426a5259d4f65374b326823feee17175407f08e7a8.exe
"C:\Users\Admin\AppData\Local\Temp\2de3cea3eb6eedbec7436f426a5259d4f65374b326823feee17175407f08e7a8.exe"
1⤵
PID:3000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3000-0-0x0000000000DE0000-0x0000000000E5A000-memory.dmp

Filesize
488KB

Download
memory/3000-1-0x0000000074230000-0x000000007491E000-memory.dmp

Filesize
6.9MB

Download
memory/3000-2-0x0000000004A50000-0x0000000004A90000-memory.dmp

Filesize
256KB

Download
memory/3000-4-0x0000000004A50000-0x0000000004A90000-memory.dmp

Filesize
256KB

Download
memory/3000-5-0x0000000004A50000-0x0000000004A90000-memory.dmp

Filesize
256KB

Download
memory/3000-6-0x0000000074230000-0x000000007491E000-memory.dmp

Filesize
6.9MB

Download