ThreatTrove

Medusa

2 cached samples attributed to Medusa by 2 sources, through 2 distinct vendor labels.

2cached samples
2sources naming it
2distinct labels
2also in another family

Samples

Newest cache entry first. Every row links to the full report, where each source's own answer is shown unsummarised. The labels behind these rows are listed below the table.

SampleVerdictNamed byAlso taggedCached
6cf719a750cdad80c83829c13c31b34b6df322de Malicious virustotal Mirai 6d ago
b732b3c5371ebf687f15fcef52b7ea412c571d931ed8dae8556c44d434cc90cc Malicious hybridanalysisvirustotal Mirai 6d ago
1–2 of 2 page 1 / 1

Why these samples are here

Each source returns its own string for a family. This is every label behind the 2 samples above, the source that returned it, and how many samples carried it. Counts overlap: one sample can be named twice, so they do not add up to the sample total.

Label as returnedSource that returned itSamples carrying it
downloader.medusa/shell virustotal 2 samples
Linux.Medusa.C.Generic hybridanalysis 1 sample

Named alongside

Counted per sample: a sample tagged with both families adds one here. This is co-occurrence in vendor labels, not a claim that the two families are related.

Derived from cached source answers, newest cache entry 2026-11-02 15:37. A sample leaves this page when the cache entry it was read from is replaced; a generic or unrecognised label never put it here.