ef99a1844cbf354868a70cdcc2584ec94ffceafc4ffcd3a6b5563fa1d632844e

Submit
Reports

Overview

overview

Static

static

samples (2) (3).zip

windows7-x64

samples (2) (3).zip

windows10-2004-x64

100b8bfff5...48.exe

windows7-x64

100b8bfff5...48.exe

windows10-2004-x64

16b5122423...49.exe

windows7-x64

16b5122423...49.exe

windows10-2004-x64

2727dde741...98.exe

windows7-x64

2727dde741...98.exe

windows10-2004-x64

29dd920ac1...e5.zip

windows7-x64

29dd920ac1...e5.zip

windows10-2004-x64

2001.exe

windows7-x64

2001.exe

windows10-2004-x64

3c5ffe21fd...017.js

windows7-x64

3c5ffe21fd...017.js

windows10-2004-x64

48493bb68b...20.exe

windows7-x64

48493bb68b...20.exe

windows10-2004-x64

568a79ce58...19.exe

windows7-x64

568a79ce58...19.exe

windows10-2004-x64

57de0d2d59...fe.exe

windows7-x64

57de0d2d59...fe.exe

windows10-2004-x64

5e34ceeaf6...05.exe

windows7-x64

5e34ceeaf6...05.exe

windows10-2004-x64

6e2db44578...ac.exe

windows7-x64

6e2db44578...ac.exe

windows10-2004-x64

75342ada93...76.exe

windows7-x64

75342ada93...76.exe

windows10-2004-x64

7e623dca8a...e2.exe

windows7-x64

7e623dca8a...e2.exe

windows10-2004-x64

87f2db714e...7e.exe

windows7-x64

87f2db714e...7e.exe

windows10-2004-x64

8dcb1af1e7...b0.exe

windows7-x64

8dcb1af1e7...b0.exe

windows10-2004-x64

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
01-01-2024 15:12

Sharing

Copy URL

Twitter E-mail

Static task

static1

medusalocker

3 signatures

Behavioral task

behavioral1

Sample

samples (2) (3).zip

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

samples (2) (3).zip

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

100b8bfff550fb74c98a2ef9a71d4bb53553d2d7ba509bb451fe32814ec57e48.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

100b8bfff550fb74c98a2ef9a71d4bb53553d2d7ba509bb451fe32814ec57e48.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

16b51224239d3671b1af3e8f2656a2ad1e7f5fb9acb09111a95461338a841b49.exe

Resource

win7-20231215-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

16b51224239d3671b1af3e8f2656a2ad1e7f5fb9acb09111a95461338a841b49.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

2727dde7418284bd2b16a032346a9c6921cbfb5e950ad21c9468792b71ee3898.exe

Resource

win7-20231129-en

persistence ransomware

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

2727dde7418284bd2b16a032346a9c6921cbfb5e950ad21c9468792b71ee3898.exe

Resource

win10v2004-20231215-en

persistence ransomware

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral9

Sample

29dd920ac1453b5be12fcef5af45690dbbe625e985f6692e237a057e832937e5.zip

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

29dd920ac1453b5be12fcef5af45690dbbe625e985f6692e237a057e832937e5.zip

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

2001.exe

Resource

win7-20231215-en

ransomware

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral12

Sample

2001.exe

Resource

win10v2004-20231215-en

ransomware

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral13

Sample

3c5ffe21fd24c4daf62f5190d96e65bf7a25232ef9ec956a77db910e90750017.js

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

3c5ffe21fd24c4daf62f5190d96e65bf7a25232ef9ec956a77db910e90750017.js

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

48493bb68bc1062b11cc505e444db288ec6cba0c979d10a9b5a3ea775daf9420.exe

Resource

win7-20231215-en

globeimposter persistence ransomware spyware stealer

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral16

Sample

48493bb68bc1062b11cc505e444db288ec6cba0c979d10a9b5a3ea775daf9420.exe

Resource

win10v2004-20231215-en

globeimposter persistence ransomware

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

568a79ce585dac32af237cb187b663cb6d2e4f594d66860c7ea1b3c66e4b7919.exe

Resource

win7-20231215-en

persistence ransomware

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral18

Sample

568a79ce585dac32af237cb187b663cb6d2e4f594d66860c7ea1b3c66e4b7919.exe

Resource

win10v2004-20231215-en

persistence ransomware

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral19

Sample

57de0d2d5945db11d6c845459419a1b48a5cf415a7a0866c40b03afaec6fb4fe.exe

Resource

win7-20231215-en

ransomware spyware stealer

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

57de0d2d5945db11d6c845459419a1b48a5cf415a7a0866c40b03afaec6fb4fe.exe

Resource

win10v2004-20231215-en

spyware stealer

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

5e34ceeaf60a7cdfaeee0443a87edb92115727130323314628503dfe755b9505.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

5e34ceeaf60a7cdfaeee0443a87edb92115727130323314628503dfe755b9505.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

6e2db44578ff2fdcab7938517973ed9bfd3532d7b29b7798ceb9f04ed079c1ac.exe

Resource

win7-20231215-en

persistence ransomware

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral24

Sample

6e2db44578ff2fdcab7938517973ed9bfd3532d7b29b7798ceb9f04ed079c1ac.exe

Resource

win10v2004-20231215-en

persistence ransomware

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral25

Sample

75342ada938ea71dc863ee603a075a3ff7cbd759a091879f065a849650097a76.exe

Resource

win7-20231215-en

persistence

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral26

Sample

75342ada938ea71dc863ee603a075a3ff7cbd759a091879f065a849650097a76.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

7e623dca8a26a45440c331e383ac6ce3783d5c1bd60b91ee91ce0cc5841633e2.exe

Resource

win7-20231215-en

dharma persistence ransomware spyware stealer

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral28

Sample

7e623dca8a26a45440c331e383ac6ce3783d5c1bd60b91ee91ce0cc5841633e2.exe

Resource

win10v2004-20231215-en

dharma persistence ransomware

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral29

Sample

87f2db714eac44b77889c850b8b6b55e2b117c88ac8f8923b47ac89fecadab7e.exe

Resource

win7-20231215-en

persistence

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral30

Sample

87f2db714eac44b77889c850b8b6b55e2b117c88ac8f8923b47ac89fecadab7e.exe

Resource

win10v2004-20231215-en

persistence

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral31

Sample

8dcb1af1e7886834252394e9710ee72b9bfa910779c4ea041831d0622efa85b0.exe

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

8dcb1af1e7886834252394e9710ee72b9bfa910779c4ea041831d0622efa85b0.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target

samples (2) (3).zip
Size

2.1MB
MD5

ef77a8926ba8419c886a9862e064eb7f
SHA1

a12d66fca51f2ceb0a0d631f84924678b6481e48
SHA256

ef99a1844cbf354868a70cdcc2584ec94ffceafc4ffcd3a6b5563fa1d632844e
SHA512

a7f86c90e2734d1033eb5afd814b554c92bbd30128b02183d5cba689e7ac0b2c065eed9534cfac689e7bc6a405718fec8b567cbaf8e8711a791f707d2cc4f315
SSDEEP

49152:bGKM2Bb45hv8YJbPp38tBHjgq6/IyKU7UIk0EaQLeM+AZHDQl:bGKM2BU5hvbJbhOEq6MU7UIkxaQqMvy

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\samples (2) (3).zip"
1⤵
PID:2548

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads