Overview

overview

10

Static

static

10

6673441d5e...30.exe

windows7-x64

10

6673441d5e...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6673441d5e4c3adcbe670fd4025b90549bbc259224653a6795c123d59ff92a30.sample

  • Size

    308KB

  • Sample

    240227-v98bksfc77

  • MD5

    a33262199abfa39774d5f5e69957dde8

  • SHA1

    0792fe4d9f514d587edf772aa6acc6d0879e4974

  • SHA256

    6673441d5e4c3adcbe670fd4025b90549bbc259224653a6795c123d59ff92a30

  • SHA512

    958f569a47284b2ee41e9754d529b80078dcd218cc8a7bbdcf372589f0ea9dbfb8f69ef7b116f6c057edf4159373ed38dcbf17c7757a5f8f0236e68e91b89a88

  • SSDEEP

    6144:Ek4DdotiH8um78UhQyZ72VQShKLzuTHDZnV24lYgfg:L61m7rhQyZiBzegf

Score
10/10
medusalocker

Malware Config

Targets

    • Target

      6673441d5e4c3adcbe670fd4025b90549bbc259224653a6795c123d59ff92a30.sample

    • Size

      308KB

    • MD5

      a33262199abfa39774d5f5e69957dde8

    • SHA1

      0792fe4d9f514d587edf772aa6acc6d0879e4974

    • SHA256

      6673441d5e4c3adcbe670fd4025b90549bbc259224653a6795c123d59ff92a30

    • SHA512

      958f569a47284b2ee41e9754d529b80078dcd218cc8a7bbdcf372589f0ea9dbfb8f69ef7b116f6c057edf4159373ed38dcbf17c7757a5f8f0236e68e91b89a88

    • SSDEEP

      6144:Ek4DdotiH8um78UhQyZ72VQShKLzuTHDZnV24lYgfg:L61m7rhQyZiBzegf

    Score
    10/10

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks