General
- Target Medusa.exe
- Size 70.0MB
- Sample260723-nrpyysaj5t
- SHA256 5216aa4849ab808dbe997ec15d8a0b004d78a4dbb46e0d1b211d592ae5c8c00e
- MD5 537509fabc9c8c2194dc85bd7b23d677
- SHA1 da3f52f7bd50c838164e7efcac8eda432692b562
- SHA512 87a21e2cd80c6eaf92bb200f0af5bd17325a3422b2a025fe50bdc298c9535698c25724217efd4f7186b6aeb7e1e2efc22e7decb4671082b98f338a1fe8102642
- SSDEEP 1572864:IlKy6r/R2Bn9FNramw/D6cSE/SQXJxc7Eg0BRYaZ+hq:IlX6rYzFNrRemc0QXJxc7fAiVU
- TLSH T15AF73337338B64BED06E46B976B69120113FAF6115178C468AE4D45CDF3A8B40D3FB86
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Medusa.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Medusa.exe
- Size 70.0MB
- SHA256 5216aa4849ab808dbe997ec15d8a0b004d78a4dbb46e0d1b211d592ae5c8c00e
- MD5 537509fabc9c8c2194dc85bd7b23d677
- SHA1 da3f52f7bd50c838164e7efcac8eda432692b562
- SHA512 87a21e2cd80c6eaf92bb200f0af5bd17325a3422b2a025fe50bdc298c9535698c25724217efd4f7186b6aeb7e1e2efc22e7decb4671082b98f338a1fe8102642
- SSDEEP 1572864:IlKy6r/R2Bn9FNramw/D6cSE/SQXJxc7Eg0BRYaZ+hq:IlX6rYzFNrRemc0QXJxc7fAiVU
- TLSH T15AF73337338B64BED06E46B976B69120113FAF6115178C468AE4D45CDF3A8B40D3FB86
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Executes a VBScript file via the Windows Script Host.