Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Malware Families
Excerpt
Introduction Medusa is RansomWare that will run specific tasks to prepare the target system for the encryption of files, Medusa was first seen in 2019, Medusa avoids executable files, probably to avoid rendering the targeted system unusable for paying the ransom, Medusa Locker has been known to exploit Remote Desktop Protocol (RDP) vulnerabilities to gain access to a victim’s machine, It uses a combination of AES and RSA-2048, and reportedly appends extensions such as…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 137e18a84891d727543efd48ea8e444bbf65f960890dcb149d02daee6d07b487 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…