Overview

overview

10

Static

static

10

564dd895be...c6.exe

windows7-x64

10

564dd895be...c6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    564dd895beba4f060b55d76a578baea5b63ec9a81bbef4e72cd6d499d37f6dc6.sample

  • Size

    277KB

  • Sample

    240227-v88wqafe8w

  • MD5

    f739f6865c55f938aedc8786bd8fa941

  • SHA1

    992323180ff9a232c8726625ccb064470dad7fa7

  • SHA256

    564dd895beba4f060b55d76a578baea5b63ec9a81bbef4e72cd6d499d37f6dc6

  • SHA512

    5f883ed6266a31b29a629193f6a139f83b26a0862fd3e25d9dcd2469d54a63433f472afca3b862f22b3e0e6ec09cbad4fbb9b4229b993fb6343c132329220957

  • SSDEEP

    6144:SZ1gm4z+Rp4PCL8YM6c2G/FtmUPvo39UPdENN4:il4qnM6c26s39HNN4

Score
10/10
medusalocker

Malware Config

Targets

    • Target

      564dd895beba4f060b55d76a578baea5b63ec9a81bbef4e72cd6d499d37f6dc6.sample

    • Size

      277KB

    • MD5

      f739f6865c55f938aedc8786bd8fa941

    • SHA1

      992323180ff9a232c8726625ccb064470dad7fa7

    • SHA256

      564dd895beba4f060b55d76a578baea5b63ec9a81bbef4e72cd6d499d37f6dc6

    • SHA512

      5f883ed6266a31b29a629193f6a139f83b26a0862fd3e25d9dcd2469d54a63433f472afca3b862f22b3e0e6ec09cbad4fbb9b4229b993fb6343c132329220957

    • SSDEEP

      6144:SZ1gm4z+Rp4PCL8YM6c2G/FtmUPvo39UPdENN4:il4qnM6c26s39HNN4

    Score
    10/10

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks