ef99a1844cbf354868a70cdcc2584ec94ffceafc4ffcd3a6b5563fa1d632844e

Submit
Reports

Overview

overview

Static

static

samples (2) (3).zip

windows7-x64

samples (2) (3).zip

windows10-2004-x64

100b8bfff5...48.exe

windows7-x64

100b8bfff5...48.exe

windows10-2004-x64

16b5122423...49.exe

windows7-x64

16b5122423...49.exe

windows10-2004-x64

2727dde741...98.exe

windows7-x64

2727dde741...98.exe

windows10-2004-x64

29dd920ac1...e5.zip

windows7-x64

29dd920ac1...e5.zip

windows10-2004-x64

2001.exe

windows7-x64

2001.exe

windows10-2004-x64

3c5ffe21fd...017.js

windows7-x64

3c5ffe21fd...017.js

windows10-2004-x64

48493bb68b...20.exe

windows7-x64

48493bb68b...20.exe

windows10-2004-x64

568a79ce58...19.exe

windows7-x64

568a79ce58...19.exe

windows10-2004-x64

57de0d2d59...fe.exe

windows7-x64

57de0d2d59...fe.exe

windows10-2004-x64

5e34ceeaf6...05.exe

windows7-x64

5e34ceeaf6...05.exe

windows10-2004-x64

6e2db44578...ac.exe

windows7-x64

6e2db44578...ac.exe

windows10-2004-x64

75342ada93...76.exe

windows7-x64

75342ada93...76.exe

windows10-2004-x64

7e623dca8a...e2.exe

windows7-x64

7e623dca8a...e2.exe

windows10-2004-x64

87f2db714e...7e.exe

windows7-x64

87f2db714e...7e.exe

windows10-2004-x64

8dcb1af1e7...b0.exe

windows7-x64

8dcb1af1e7...b0.exe

windows10-2004-x64

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01-01-2024 15:12

Sharing

Copy URL

Twitter E-mail

Static task

static1

medusalocker

3 signatures

Behavioral task

behavioral1

Sample

samples (2) (3).zip

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

samples (2) (3).zip

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

100b8bfff550fb74c98a2ef9a71d4bb53553d2d7ba509bb451fe32814ec57e48.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

100b8bfff550fb74c98a2ef9a71d4bb53553d2d7ba509bb451fe32814ec57e48.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

16b51224239d3671b1af3e8f2656a2ad1e7f5fb9acb09111a95461338a841b49.exe

Resource

win7-20231215-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

16b51224239d3671b1af3e8f2656a2ad1e7f5fb9acb09111a95461338a841b49.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

2727dde7418284bd2b16a032346a9c6921cbfb5e950ad21c9468792b71ee3898.exe

Resource

win7-20231129-en

persistence ransomware

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

2727dde7418284bd2b16a032346a9c6921cbfb5e950ad21c9468792b71ee3898.exe

Resource

win10v2004-20231215-en

persistence ransomware

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral9

Sample

29dd920ac1453b5be12fcef5af45690dbbe625e985f6692e237a057e832937e5.zip

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

29dd920ac1453b5be12fcef5af45690dbbe625e985f6692e237a057e832937e5.zip

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

2001.exe

Resource

win7-20231215-en

ransomware

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral12

Sample

2001.exe

Resource

win10v2004-20231215-en

ransomware

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral13

Sample

3c5ffe21fd24c4daf62f5190d96e65bf7a25232ef9ec956a77db910e90750017.js

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

3c5ffe21fd24c4daf62f5190d96e65bf7a25232ef9ec956a77db910e90750017.js

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

48493bb68bc1062b11cc505e444db288ec6cba0c979d10a9b5a3ea775daf9420.exe

Resource

win7-20231215-en

globeimposter persistence ransomware spyware stealer

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral16

Sample

48493bb68bc1062b11cc505e444db288ec6cba0c979d10a9b5a3ea775daf9420.exe

Resource

win10v2004-20231215-en

globeimposter persistence ransomware

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

568a79ce585dac32af237cb187b663cb6d2e4f594d66860c7ea1b3c66e4b7919.exe

Resource

win7-20231215-en

persistence ransomware

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral18

Sample

568a79ce585dac32af237cb187b663cb6d2e4f594d66860c7ea1b3c66e4b7919.exe

Resource

win10v2004-20231215-en

persistence ransomware

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral19

Sample

57de0d2d5945db11d6c845459419a1b48a5cf415a7a0866c40b03afaec6fb4fe.exe

Resource

win7-20231215-en

ransomware spyware stealer

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

57de0d2d5945db11d6c845459419a1b48a5cf415a7a0866c40b03afaec6fb4fe.exe

Resource

win10v2004-20231215-en

spyware stealer

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

5e34ceeaf60a7cdfaeee0443a87edb92115727130323314628503dfe755b9505.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

5e34ceeaf60a7cdfaeee0443a87edb92115727130323314628503dfe755b9505.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

6e2db44578ff2fdcab7938517973ed9bfd3532d7b29b7798ceb9f04ed079c1ac.exe

Resource

win7-20231215-en

persistence ransomware

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral24

Sample

6e2db44578ff2fdcab7938517973ed9bfd3532d7b29b7798ceb9f04ed079c1ac.exe

Resource

win10v2004-20231215-en

persistence ransomware

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral25

Sample

75342ada938ea71dc863ee603a075a3ff7cbd759a091879f065a849650097a76.exe

Resource

win7-20231215-en

persistence

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral26

Sample

75342ada938ea71dc863ee603a075a3ff7cbd759a091879f065a849650097a76.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

7e623dca8a26a45440c331e383ac6ce3783d5c1bd60b91ee91ce0cc5841633e2.exe

Resource

win7-20231215-en

dharma persistence ransomware spyware stealer

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral28

Sample

7e623dca8a26a45440c331e383ac6ce3783d5c1bd60b91ee91ce0cc5841633e2.exe

Resource

win10v2004-20231215-en

dharma persistence ransomware

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral29

Sample

87f2db714eac44b77889c850b8b6b55e2b117c88ac8f8923b47ac89fecadab7e.exe

Resource

win7-20231215-en

persistence

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral30

Sample

87f2db714eac44b77889c850b8b6b55e2b117c88ac8f8923b47ac89fecadab7e.exe

Resource

win10v2004-20231215-en

persistence

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral31

Sample

8dcb1af1e7886834252394e9710ee72b9bfa910779c4ea041831d0622efa85b0.exe

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

8dcb1af1e7886834252394e9710ee72b9bfa910779c4ea041831d0622efa85b0.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target

100b8bfff550fb74c98a2ef9a71d4bb53553d2d7ba509bb451fe32814ec57e48.exe
Size

308KB
MD5

e2982778434438cce87e6f43493d63ce
SHA1

1927c6f73714a3d06d379d2bc4693e7a970d5cea
SHA256

100b8bfff550fb74c98a2ef9a71d4bb53553d2d7ba509bb451fe32814ec57e48
SHA512

47e51150b308109e218949cfe80160706bca06f2ba9b2ffac27e36db35a2ead729766afc09936d020cde20e0678a7c912d1ed59a6295fe9bcceb17f2b12b2248
SSDEEP

6144:j09jZMz/y1rekkCkVg+AW93YVfhZR3MM+SYRQlsQc0EJroJ:AXC/FkdkVg9WlufR3MM+PRQvcZ

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\100b8bfff550fb74c98a2ef9a71d4bb53553d2d7ba509bb451fe32814ec57e48.exe
"C:\Users\Admin\AppData\Local\Temp\100b8bfff550fb74c98a2ef9a71d4bb53553d2d7ba509bb451fe32814ec57e48.exe"
1⤵
PID:1708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1708-0-0x00000000001E0000-0x0000000000234000-memory.dmp

Filesize
336KB

Download
memory/1708-1-0x00000000746A0000-0x0000000074D8E000-memory.dmp

Filesize
6.9MB

Download
memory/1708-2-0x0000000001E80000-0x0000000001EC0000-memory.dmp

Filesize
256KB

Download
memory/1708-3-0x0000000001DF0000-0x0000000001E34000-memory.dmp

Filesize
272KB

Download
memory/1708-4-0x0000000004930000-0x00000000049B6000-memory.dmp

Filesize
536KB

Download
memory/1708-5-0x00000000746A0000-0x0000000074D8E000-memory.dmp

Filesize
6.9MB

Download
memory/1708-6-0x0000000001E80000-0x0000000001EC0000-memory.dmp

Filesize
256KB

Download
memory/1708-7-0x00000000746A0000-0x0000000074D8E000-memory.dmp

Filesize
6.9MB

Download