8ed183df76d08024f15e051f4f5711535dde6372ff4beafecfff07f82e846800

Submit
Reports

Overview

overview

Static

static

samples (2) (2).zip

windows7-x64

samples (2) (2).zip

windows10-2004-x64

083e147374...08.exe

windows7-x64

083e147374...08.exe

windows10-2004-x64

12437a49d2...3d.exe

windows7-x64

12437a49d2...3d.exe

windows10-2004-x64

1945c44901...7e.exe

windows7-x64

1945c44901...7e.exe

windows10-2004-x64

2040fa2a3c...d4.exe

windows7-x64

2040fa2a3c...d4.exe

windows10-2004-x64

2b5109e9a2...d9.exe

windows7-x64

2b5109e9a2...d9.exe

windows10-2004-x64

3538750cfe...5f.exe

windows7-x64

3538750cfe...5f.exe

windows10-2004-x64

5d96952d47...5f.exe

windows7-x64

5d96952d47...5f.exe

windows10-2004-x64

63fb410fc5...22.exe

windows7-x64

63fb410fc5...22.exe

windows10-2004-x64

67beeb7a19...08.exe

windows7-x64

67beeb7a19...08.exe

windows10-2004-x64

6e5678ebd4...71.exe

windows7-x64

6e5678ebd4...71.exe

windows10-2004-x64

71506a3322...fb.exe

windows7-x64

71506a3322...fb.exe

windows10-2004-x64

734b9974ec...6d.exe

windows7-x64

734b9974ec...6d.exe

windows10-2004-x64

81a27b3dcf...40.exe

windows7-x64

81a27b3dcf...40.exe

windows10-2004-x64

a1bd0fa8ad...46.exe

windows7-x64

a1bd0fa8ad...46.exe

windows10-2004-x64

a465bc0871...e3.exe

windows7-x64

a465bc0871...e3.exe

windows10-2004-x64

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01-01-2024 15:12

Sharing

Copy URL

Twitter E-mail

Static task

static1

agilenet medusalocker

5 signatures

Behavioral task

behavioral1

Sample

samples (2) (2).zip

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

samples (2) (2).zip

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

083e147374de04930caa882acaeda6df4821b75f869edb7386281f684e573c08.exe

Resource

win7-20231215-en

evasion

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

083e147374de04930caa882acaeda6df4821b75f869edb7386281f684e573c08.exe

Resource

win10v2004-20231215-en

evasion

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral5

Sample

12437a49d298941af8d087a1ff478a68ab4c312654153e17d598ff1c87be6b3d.exe

Resource

win7-20231215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

12437a49d298941af8d087a1ff478a68ab4c312654153e17d598ff1c87be6b3d.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral7

Sample

1945c44901e7aa9dd5b6e7e6e07a777d57f7e76120a3ca5a46a0f983d30ce37e.exe

Resource

win7-20231129-en

ransomware

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

1945c44901e7aa9dd5b6e7e6e07a777d57f7e76120a3ca5a46a0f983d30ce37e.exe

Resource

win10v2004-20231215-en

dharma persistence ransomware spyware stealer

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral9

Sample

2040fa2a3c5b16d74442d41d224a6ab16e0290a30f0535b18cb50de6a59686d4.exe

Resource

win7-20231215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

2040fa2a3c5b16d74442d41d224a6ab16e0290a30f0535b18cb50de6a59686d4.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

2b5109e9a249a795a412a3961aae3e5b576a233d9681f5ec0b4d88ce009b6ed9.exe

Resource

win7-20231215-en

djvu discovery persistence ransomware

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral12

Sample

2b5109e9a249a795a412a3961aae3e5b576a233d9681f5ec0b4d88ce009b6ed9.exe

Resource

win10v2004-20231215-en

djvu discovery persistence ransomware

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral13

Sample

3538750cfe06d8fe364bc4f396229bfd08c9856f17477b0f8444d35a7f89775f.exe

Resource

win7-20231215-en

evasion ransomware

windows7-x64

17 signatures

150 seconds

Behavioral task

behavioral14

Sample

3538750cfe06d8fe364bc4f396229bfd08c9856f17477b0f8444d35a7f89775f.exe

Resource

win10v2004-20231215-en

evasion ransomware

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral15

Sample

5d96952d473d386285f01726073d8f1ec46c983fe4c9d657babe9272330d655f.exe

Resource

win7-20231129-en

djvu discovery ransomware

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral16

Sample

5d96952d473d386285f01726073d8f1ec46c983fe4c9d657babe9272330d655f.exe

Resource

win10v2004-20231215-en

djvu discovery persistence ransomware

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral17

Sample

63fb410fc5267c61c5099927af714a8f5f4ba6dcdeeb1f297b022879767c7222.exe

Resource

win7-20231215-en

persistence spyware stealer

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

63fb410fc5267c61c5099927af714a8f5f4ba6dcdeeb1f297b022879767c7222.exe

Resource

win10v2004-20231215-en

persistence spyware stealer

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

67beeb7a196a91ffdb77af4e53143e75a157ea6cf3432a2e14e1c55d11ef2f08.exe

Resource

win7-20231215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral20

Sample

67beeb7a196a91ffdb77af4e53143e75a157ea6cf3432a2e14e1c55d11ef2f08.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

6e5678ebd457353b7c095af806f92b5f54341bbfa2c8d3f5ab03b84483013271.exe

Resource

win7-20231129-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

6e5678ebd457353b7c095af806f92b5f54341bbfa2c8d3f5ab03b84483013271.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

71506a3322b0e0bc6fc2c1a1f0ac844a82a8c3fbbfeb4e6452013b4ade7610fb.exe

Resource

win7-20231215-en

dharma zgrat persistence ransomware rat

windows7-x64

19 signatures

150 seconds

Behavioral task

behavioral24

Sample

71506a3322b0e0bc6fc2c1a1f0ac844a82a8c3fbbfeb4e6452013b4ade7610fb.exe

Resource

win10v2004-20231215-en

dharma zgrat persistence ransomware rat

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral25

Sample

734b9974ec7f673460deb7ae17af4eed0ad6fae862f0765068430050fc44d66d.exe

Resource

win7-20231215-en

djvu discovery persistence ransomware

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral26

Sample

734b9974ec7f673460deb7ae17af4eed0ad6fae862f0765068430050fc44d66d.exe

Resource

win10v2004-20231215-en

djvu discovery persistence ransomware

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral27

Sample

81a27b3dcfbd52ceb68043465a9aaa3ff6a2e4d04e487197bb23db5c76eec740.exe

Resource

win7-20231129-en

ransomware

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

81a27b3dcfbd52ceb68043465a9aaa3ff6a2e4d04e487197bb23db5c76eec740.exe

Resource

win10v2004-20231215-en

evasion ransomware

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral29

Sample

a1bd0fa8ada1da0181b8d108ca72a41795b55060613e0182f2cbbc592f857f46.exe

Resource

win7-20231215-en

djvu discovery persistence ransomware

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral30

Sample

a1bd0fa8ada1da0181b8d108ca72a41795b55060613e0182f2cbbc592f857f46.exe

Resource

win10v2004-20231215-en

djvu discovery persistence ransomware

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral31

Sample

a465bc08714bc760130a3f150a704df2f08af083b2aaf0c931e714019f3769e3.exe

Resource

win7-20231129-en

persistence

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

a465bc08714bc760130a3f150a704df2f08af083b2aaf0c931e714019f3769e3.exe

Resource

win10v2004-20231215-en

persistence

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

samples (2) (2).zip
Size

11.5MB
MD5

3103452bf9094d6f3ec5ddee144b821a
SHA1

1995b4171447b7e11302682b29c34bba4c5939f9
SHA256

8ed183df76d08024f15e051f4f5711535dde6372ff4beafecfff07f82e846800
SHA512

3559e9e28f7ba881207ba01fd0c2eedf29f91d88b7c44c938fbec73e756a39ab0e072f88072bb82365e7476f6247658f8d59147e64eee6fb825003085b4edb6f
SSDEEP

196608:1g0w+y495NuivJ1dlbNm5IemCPIurAW58NFfApXHUxcSeVIDF/je3ZSEMIVab0gx:1g0w+F5NuivJFbN4mCz5Uip0OFVuepWn

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\samples (2) (2).zip"
1⤵
PID:832

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads