meduza | 2ad84bfff7d5257fdeb81b4b52b8e0115f26e8e0cdaa014f9e3084f518aa6149 | Triage

Sharing

General

Target

2ad84bfff7d5257fdeb81b4b52b8e0115f26e8e0cdaa014f9e3084f518aa6149.exe
Size

667KB
Sample

240601-zec96sec6s
MD5

f1fec815d89e12b6214a62a5a0be2f04
SHA1

92d27f9a7b2c8ef52e96903d58830f5f441fa3d2
SHA256

2ad84bfff7d5257fdeb81b4b52b8e0115f26e8e0cdaa014f9e3084f518aa6149
SHA512

6700245a179a6be89419f3f7e32e1459f21ce09990739f2f90b9f2a0cdecd93a2c419c6f3d749a5613c3580410f4febf3dfb9863649582fba85fce4d3db84d55
SSDEEP

12288:10Vzuj87ZA9O8Qdhu5QU2ajd0YPThtY0AZzSoFyhaUv:KVs8i5QFUXjyYjY0AZec

Score

10^/10

meduza

Malware Config

Targets

- Target
  
  2ad84bfff7d5257fdeb81b4b52b8e0115f26e8e0cdaa014f9e3084f518aa6149.exe
- Size
  
  667KB
- MD5
  
  f1fec815d89e12b6214a62a5a0be2f04
- SHA1
  
  92d27f9a7b2c8ef52e96903d58830f5f441fa3d2
- SHA256
  
  2ad84bfff7d5257fdeb81b4b52b8e0115f26e8e0cdaa014f9e3084f518aa6149
- SHA512
  
  6700245a179a6be89419f3f7e32e1459f21ce09990739f2f90b9f2a0cdecd93a2c419c6f3d749a5613c3580410f4febf3dfb9863649582fba85fce4d3db84d55
- SSDEEP
  
  12288:10Vzuj87ZA9O8Qdhu5QU2ajd0YPThtY0AZzSoFyhaUv:KVs8i5QFUXjyYjY0AZec
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2