Malware Analysis Report

2024-09-11 01:45

Sample ID 240621-t9bf6sxhlg
Target 17873237816.zip
SHA256 0ca42d0cf529e22fe333a0816ada73459b6cf4b06c4483b88cdf33343cfae408
Tags
medusalocker
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

0ca42d0cf529e22fe333a0816ada73459b6cf4b06c4483b88cdf33343cfae408

Threat Level: Known bad

The file 17873237816.zip was found to be: Known bad.

Malicious Activity Summary

medusalocker

MedusaLocker payload

Medusalocker family

Unsigned PE

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-21 16:44

Signatures

MedusaLocker payload

Description Indicator Process Target
N/A N/A N/A N/A

Medusalocker family

medusalocker

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-21 16:44

Reported

2024-06-21 16:47

Platform

win7-20240611-en

Max time kernel

119s

Max time network

119s

Command Line

"C:\Users\Admin\AppData\Local\Temp\db646bd7c7e3319f3182a29c13b5119524ac62c796f7a77ec3d89262819d601e.exe"

Signatures

N/A

Processes

C:\Users\Admin\AppData\Local\Temp\db646bd7c7e3319f3182a29c13b5119524ac62c796f7a77ec3d89262819d601e.exe

"C:\Users\Admin\AppData\Local\Temp\db646bd7c7e3319f3182a29c13b5119524ac62c796f7a77ec3d89262819d601e.exe"

Network

N/A

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-21 16:44

Reported

2024-06-21 16:46

Platform

win10v2004-20240508-en

Max time kernel

51s

Max time network

51s

Command Line

"C:\Users\Admin\AppData\Local\Temp\db646bd7c7e3319f3182a29c13b5119524ac62c796f7a77ec3d89262819d601e.exe"

Signatures

N/A

Processes

C:\Users\Admin\AppData\Local\Temp\db646bd7c7e3319f3182a29c13b5119524ac62c796f7a77ec3d89262819d601e.exe

"C:\Users\Admin\AppData\Local\Temp\db646bd7c7e3319f3182a29c13b5119524ac62c796f7a77ec3d89262819d601e.exe"

Network

Files

N/A