ef99a1844cbf354868a70cdcc2584ec94ffceafc4ffcd3a6b5563fa1d632844e

Submit
Reports

Overview

overview

Static

static

samples (2) (3).zip

windows7-x64

samples (2) (3).zip

windows10-2004-x64

100b8bfff5...48.exe

windows7-x64

100b8bfff5...48.exe

windows10-2004-x64

16b5122423...49.exe

windows7-x64

16b5122423...49.exe

windows10-2004-x64

2727dde741...98.exe

windows7-x64

2727dde741...98.exe

windows10-2004-x64

29dd920ac1...e5.zip

windows7-x64

29dd920ac1...e5.zip

windows10-2004-x64

2001.exe

windows7-x64

2001.exe

windows10-2004-x64

3c5ffe21fd...017.js

windows7-x64

3c5ffe21fd...017.js

windows10-2004-x64

48493bb68b...20.exe

windows7-x64

48493bb68b...20.exe

windows10-2004-x64

568a79ce58...19.exe

windows7-x64

568a79ce58...19.exe

windows10-2004-x64

57de0d2d59...fe.exe

windows7-x64

57de0d2d59...fe.exe

windows10-2004-x64

5e34ceeaf6...05.exe

windows7-x64

5e34ceeaf6...05.exe

windows10-2004-x64

6e2db44578...ac.exe

windows7-x64

6e2db44578...ac.exe

windows10-2004-x64

75342ada93...76.exe

windows7-x64

75342ada93...76.exe

windows10-2004-x64

7e623dca8a...e2.exe

windows7-x64

7e623dca8a...e2.exe

windows10-2004-x64

87f2db714e...7e.exe

windows7-x64

87f2db714e...7e.exe

windows10-2004-x64

8dcb1af1e7...b0.exe

windows7-x64

8dcb1af1e7...b0.exe

windows10-2004-x64

Analysis

max time kernel
118s
max time network
140s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01-01-2024 15:12

Sharing

Copy URL

Twitter E-mail

Static task

static1

medusalocker

3 signatures

Behavioral task

behavioral1

Sample

samples (2) (3).zip

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

samples (2) (3).zip

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

100b8bfff550fb74c98a2ef9a71d4bb53553d2d7ba509bb451fe32814ec57e48.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

100b8bfff550fb74c98a2ef9a71d4bb53553d2d7ba509bb451fe32814ec57e48.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

16b51224239d3671b1af3e8f2656a2ad1e7f5fb9acb09111a95461338a841b49.exe

Resource

win7-20231215-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

16b51224239d3671b1af3e8f2656a2ad1e7f5fb9acb09111a95461338a841b49.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

2727dde7418284bd2b16a032346a9c6921cbfb5e950ad21c9468792b71ee3898.exe

Resource

win7-20231129-en

persistence ransomware

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

2727dde7418284bd2b16a032346a9c6921cbfb5e950ad21c9468792b71ee3898.exe

Resource

win10v2004-20231215-en

persistence ransomware

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral9

Sample

29dd920ac1453b5be12fcef5af45690dbbe625e985f6692e237a057e832937e5.zip

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

29dd920ac1453b5be12fcef5af45690dbbe625e985f6692e237a057e832937e5.zip

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

2001.exe

Resource

win7-20231215-en

ransomware

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral12

Sample

2001.exe

Resource

win10v2004-20231215-en

ransomware

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral13

Sample

3c5ffe21fd24c4daf62f5190d96e65bf7a25232ef9ec956a77db910e90750017.js

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

3c5ffe21fd24c4daf62f5190d96e65bf7a25232ef9ec956a77db910e90750017.js

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

48493bb68bc1062b11cc505e444db288ec6cba0c979d10a9b5a3ea775daf9420.exe

Resource

win7-20231215-en

globeimposter persistence ransomware spyware stealer

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral16

Sample

48493bb68bc1062b11cc505e444db288ec6cba0c979d10a9b5a3ea775daf9420.exe

Resource

win10v2004-20231215-en

globeimposter persistence ransomware

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

568a79ce585dac32af237cb187b663cb6d2e4f594d66860c7ea1b3c66e4b7919.exe

Resource

win7-20231215-en

persistence ransomware

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral18

Sample

568a79ce585dac32af237cb187b663cb6d2e4f594d66860c7ea1b3c66e4b7919.exe

Resource

win10v2004-20231215-en

persistence ransomware

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral19

Sample

57de0d2d5945db11d6c845459419a1b48a5cf415a7a0866c40b03afaec6fb4fe.exe

Resource

win7-20231215-en

ransomware spyware stealer

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

57de0d2d5945db11d6c845459419a1b48a5cf415a7a0866c40b03afaec6fb4fe.exe

Resource

win10v2004-20231215-en

spyware stealer

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

5e34ceeaf60a7cdfaeee0443a87edb92115727130323314628503dfe755b9505.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

5e34ceeaf60a7cdfaeee0443a87edb92115727130323314628503dfe755b9505.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

6e2db44578ff2fdcab7938517973ed9bfd3532d7b29b7798ceb9f04ed079c1ac.exe

Resource

win7-20231215-en

persistence ransomware

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral24

Sample

6e2db44578ff2fdcab7938517973ed9bfd3532d7b29b7798ceb9f04ed079c1ac.exe

Resource

win10v2004-20231215-en

persistence ransomware

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral25

Sample

75342ada938ea71dc863ee603a075a3ff7cbd759a091879f065a849650097a76.exe

Resource

win7-20231215-en

persistence

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral26

Sample

75342ada938ea71dc863ee603a075a3ff7cbd759a091879f065a849650097a76.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

7e623dca8a26a45440c331e383ac6ce3783d5c1bd60b91ee91ce0cc5841633e2.exe

Resource

win7-20231215-en

dharma persistence ransomware spyware stealer

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral28

Sample

7e623dca8a26a45440c331e383ac6ce3783d5c1bd60b91ee91ce0cc5841633e2.exe

Resource

win10v2004-20231215-en

dharma persistence ransomware

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral29

Sample

87f2db714eac44b77889c850b8b6b55e2b117c88ac8f8923b47ac89fecadab7e.exe

Resource

win7-20231215-en

persistence

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral30

Sample

87f2db714eac44b77889c850b8b6b55e2b117c88ac8f8923b47ac89fecadab7e.exe

Resource

win10v2004-20231215-en

persistence

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral31

Sample

8dcb1af1e7886834252394e9710ee72b9bfa910779c4ea041831d0622efa85b0.exe

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

8dcb1af1e7886834252394e9710ee72b9bfa910779c4ea041831d0622efa85b0.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target

5e34ceeaf60a7cdfaeee0443a87edb92115727130323314628503dfe755b9505.exe
Size

49KB
MD5

51b8687135b216cf4c3cdb8a545540b8
SHA1

e5cba03649cd490b93d70a01595e18e934532bef
SHA256

5e34ceeaf60a7cdfaeee0443a87edb92115727130323314628503dfe755b9505
SHA512

c401e208b9d48ad46e4d9451ba6f8ab4e5efe99917a20774f668288830b0b8b008005af2f3a9131864c5741f1cad1c5efa677a0a8d1b6409ca75add86d98e5a2
SSDEEP

768:3V6573iVm2/6pG5gm8jnEU6t7+9jJJzYcHe+Z:l+yUpGa1ELt7ijJY+

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\5e34ceeaf60a7cdfaeee0443a87edb92115727130323314628503dfe755b9505.exe
"C:\Users\Admin\AppData\Local\Temp\5e34ceeaf60a7cdfaeee0443a87edb92115727130323314628503dfe755b9505.exe"
1⤵
PID:2760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2760-0-0x000007FEF5A50000-0x000007FEF63ED000-memory.dmp

Filesize
9.6MB

Download
memory/2760-1-0x0000000001DC0000-0x0000000001E40000-memory.dmp

Filesize
512KB

Download
memory/2760-2-0x000007FEF5A50000-0x000007FEF63ED000-memory.dmp

Filesize
9.6MB

Download
memory/2760-3-0x0000000001DC0000-0x0000000001E40000-memory.dmp

Filesize
512KB

Download
memory/2760-5-0x0000000001DC0000-0x0000000001E40000-memory.dmp

Filesize
512KB

Download
memory/2760-4-0x0000000001DC0000-0x0000000001E40000-memory.dmp

Filesize
512KB

Download
memory/2760-6-0x0000000001DC0000-0x0000000001E40000-memory.dmp

Filesize
512KB

Download
memory/2760-8-0x0000000001DC0000-0x0000000001E40000-memory.dmp

Filesize
512KB

Download
memory/2760-7-0x000007FEF5A50000-0x000007FEF63ED000-memory.dmp

Filesize
9.6MB

Download