General

  • Target

    samples (2) (2).zip

  • Size

    11.5MB

  • MD5

    3103452bf9094d6f3ec5ddee144b821a

  • SHA1

    1995b4171447b7e11302682b29c34bba4c5939f9

  • SHA256

    8ed183df76d08024f15e051f4f5711535dde6372ff4beafecfff07f82e846800

  • SHA512

    3559e9e28f7ba881207ba01fd0c2eedf29f91d88b7c44c938fbec73e756a39ab0e072f88072bb82365e7476f6247658f8d59147e64eee6fb825003085b4edb6f

  • SSDEEP

    196608:1g0w+y495NuivJ1dlbNm5IemCPIurAW58NFfApXHUxcSeVIDF/je3ZSEMIVab0gx:1g0w+F5NuivJFbN4mCz5Uip0OFVuepWn

Score
10/10

Malware Config

Signatures

  • MedusaLocker payload 1 IoCs
  • Medusalocker family
  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • samples (2) (2).zip
    .zip
  • 083e147374de04930caa882acaeda6df4821b75f869edb7386281f684e573c08
    .exe windows:5 windows x86 arch:x86

    4b932974a1b8b4dec33cf044302323ec


    Headers

    Imports

    Sections

  • 12437a49d298941af8d087a1ff478a68ab4c312654153e17d598ff1c87be6b3d
    .exe windows:4 windows x86 arch:x86

    e160ef8e55bb9d162da4e266afd9eef3


    Headers

    Imports

    Sections

  • 1945c44901e7aa9dd5b6e7e6e07a777d57f7e76120a3ca5a46a0f983d30ce37e
    .exe windows:4 windows x86 arch:x86

    a08952b00a788686a5ccda8fc072094a


    Headers

    Imports

    Sections

  • 2040fa2a3c5b16d74442d41d224a6ab16e0290a30f0535b18cb50de6a59686d4
    .exe windows:4 windows x86 arch:x86

    284c9d70850d445a2194446d5ac9dded


    Headers

    Imports

    Sections

  • 2b5109e9a249a795a412a3961aae3e5b576a233d9681f5ec0b4d88ce009b6ed9
    .exe windows:5 windows x86 arch:x86

    a90cc1b6f902761feb40477393138296


    Headers

    Imports

    Sections

  • 3538750cfe06d8fe364bc4f396229bfd08c9856f17477b0f8444d35a7f89775f
    .exe windows:6 windows x86 arch:x86

    f22bc6a616927c119c37738048bc1cc5


    Headers

    Imports

    Sections

  • 5d96952d473d386285f01726073d8f1ec46c983fe4c9d657babe9272330d655f
    .exe windows:5 windows x86 arch:x86

    198fcdf1107e8858620b59878845e93f


    Headers

    Imports

    Sections

  • 63fb410fc5267c61c5099927af714a8f5f4ba6dcdeeb1f297b022879767c7222
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 67beeb7a196a91ffdb77af4e53143e75a157ea6cf3432a2e14e1c55d11ef2f08
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • 6e5678ebd457353b7c095af806f92b5f54341bbfa2c8d3f5ab03b84483013271
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 71506a3322b0e0bc6fc2c1a1f0ac844a82a8c3fbbfeb4e6452013b4ade7610fb
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 734b9974ec7f673460deb7ae17af4eed0ad6fae862f0765068430050fc44d66d
    .exe windows:5 windows x86 arch:x86

    ccdfcfe3b09ab1ac2d74e3c88d512281


    Headers

    Imports

    Sections

  • 81a27b3dcfbd52ceb68043465a9aaa3ff6a2e4d04e487197bb23db5c76eec740
    .exe windows:5 windows x86 arch:x86

    1f9568b44e21b4f75fdcd8e1b27ff01b


    Headers

    Imports

    Sections

  • a1bd0fa8ada1da0181b8d108ca72a41795b55060613e0182f2cbbc592f857f46
    .exe windows:5 windows x86 arch:x86

    cda48ebb1fe57d9b31da3a94fc154bf3


    Headers

    Imports

    Sections

  • a465bc08714bc760130a3f150a704df2f08af083b2aaf0c931e714019f3769e3
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • a4dfaa8bbce586a593a86aa0e8e6c3e799d2a18b7e02d20284e83ff6f723c0d9
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ae6f3869929b1d021a10bd51dc1aace28bec1a4b000085b477c1e470b73e77fe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • bdd9dbc6d72ecc5ea0a063a1fc99e414a4cff177ec8726da0011134d8589c7d2
    .exe windows:5 windows x86 arch:x86

    aa822b1bc62e9f028a1a5882deaba84c


    Headers

    Imports

    Exports

    Sections

  • c475b20ef38d5ef011235eeaf75db5686a5fef724e3eb2fa3e8d4b056096fbb6
    .exe windows:5 windows x86 arch:x86

    a4559d1602669b68de352c9c26c5d967


    Headers

    Imports

    Sections

  • d57ee4f41d4df716e6270a147e098aabb6cac69a1d5812b1f21f0bf17a9c7db5
    .exe windows:5 windows x86 arch:x86

    6847c4a23533c8db62ddf8eb8d214ba0


    Headers

    Imports

    Sections

  • d68e18e28f3ba8db95da24be50e918d9254214079f1394eb55ce53f772041664
    .exe windows:5 windows x86 arch:x86

    ef163fd1a1dfd01940ab083fe4660afa


    Headers

    Imports

    Sections

  • dd6ac617529eed1916db34c8875f09f127ba3d2ff304352df29fdef4802143fd
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • e1bc3d93383ffb9540f20a1b58e4b3bb77ba24d247a1177030be6fe93d912136
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ea62bfae07927cc7fd706948ae7e474f4c0d7ed2afcb7c73c388e5f6936f5c29
    .exe windows:5 windows x86 arch:x86

    4b932974a1b8b4dec33cf044302323ec


    Headers

    Imports

    Sections

  • f2cafb550a0b7c248847d2548389379d0d8954335d81d60991a4d1e7333745b4
    .exe windows:4 windows x86 arch:x86

    ac131d702ee16feb46717282d66c3824


    Headers

    Imports

    Sections