meduza | cee2442ce10695e29830a77d38d4af1e24d6881203743664abc4ad9a8c97c0f2 | Triage

Sharing

General

Target

cee2442ce10695e29830a77d38d4af1e24d6881203743664abc4ad9a8c97c0f2
Size

858KB
Sample

240527-la3glseh7s
MD5

af1cda8e5e877ddf2f2be8d013dfc88e
SHA1

38a5c4e9d41fad839958b8bdb6300e9e0354df38
SHA256

cee2442ce10695e29830a77d38d4af1e24d6881203743664abc4ad9a8c97c0f2
SHA512

31becbaa27e1f10ab4d14f14849582b13c3f5582fc9d52a2aed22afdccd2cf6d6dc517d58c435c977fd8035538886c2dc728ca37b874ad8a596753ee5ed2df72
SSDEEP

12288:WUgOJ32ppwgHHMhTtlAsauEpGyKo3wlxaF1Fh1V+OGkgT:b32p+gHHMhRyL2yL+xuf/V+OfgT

Score

10^/10

meduza risepro

Malware Config

Targets

- Target
  
  cee2442ce10695e29830a77d38d4af1e24d6881203743664abc4ad9a8c97c0f2
- Size
  
  858KB
- MD5
  
  af1cda8e5e877ddf2f2be8d013dfc88e
- SHA1
  
  38a5c4e9d41fad839958b8bdb6300e9e0354df38
- SHA256
  
  cee2442ce10695e29830a77d38d4af1e24d6881203743664abc4ad9a8c97c0f2
- SHA512
  
  31becbaa27e1f10ab4d14f14849582b13c3f5582fc9d52a2aed22afdccd2cf6d6dc517d58c435c977fd8035538886c2dc728ca37b874ad8a596753ee5ed2df72
- SSDEEP
  
  12288:WUgOJ32ppwgHHMhTtlAsauEpGyKo3wlxaF1Fh1V+OGkgT:b32p+gHHMhRyL2yL+xuf/V+OfgT
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2