General

  • Target

    1bc0575b3fc6486cb2510dac1ac6ae4889b94a955d3eade53d3ba3a92d133281.zip

  • Size

    231KB

  • MD5

    c619d1b49a183011ea3dc99347aaa77f

  • SHA1

    271e7714874f2577fcda702c19b42e3471094a1e

  • SHA256

    6f768b5db1b4c7ec2df1a8d012814e8903b0a1f0b1d3b7bdfff447a2cd24a281

  • SHA512

    b717f2b06314826a15783786af2da26eb3d9e8598854535a0567d66b9227b3a0db7234e7eec58add7d078de6f5f3d91169a2612ea0a6e23deebe52904475ba09

  • SSDEEP

    6144:BjVD0s8mf31trSqSgdRF7Kt5CIWR0XYI6r4J7V0zqO5x69:BRDhhteXgs5i4Jh0zbj69

Score
10/10

Malware Config

Signatures

  • MedusaLocker payload 1 IoCs
  • Medusalocker family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1bc0575b3fc6486cb2510dac1ac6ae4889b94a955d3eade53d3ba3a92d133281.zip
    .zip

    Password: infected

  • 1bc0575b3fc6486cb2510dac1ac6ae4889b94a955d3eade53d3ba3a92d133281.exe
    .exe windows:6 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections