meduza | 62460105edf1636fd9605894deba01a417fcd8558c9a43ceefbf9fdda536a9c1 | Triage

Sharing

General

Target

62460105edf1636fd9605894deba01a417fcd8558c9a43ceefbf9fdda536a9c1.exe
Size

1.4MB
Sample

240622-bmqcpszfqf
MD5

d357d6c05936c8eb6dd5bea8ac7c251e
SHA1

34680347e1bd884e50c279ef18a861a2067b7482
SHA256

62460105edf1636fd9605894deba01a417fcd8558c9a43ceefbf9fdda536a9c1
SHA512

4d90f5e274f66dc223c7d55ab2997fb217861fe4b8a683c03d3f46b767dfb4c3463cb9a62aeacef6527d3ea7f1699a5952659415eff4d7f3bdac48c0d3b2ef6c
SSDEEP

24576:tfPEX8SkcR5uPze7dH1ZkivEdLeC+fJCHLQo3u5aUC6/wA4oAH:hPEX8StRX1ZkGpCqd5a76oA

Score

10^/10

meduza stealer

Malware Config

Targets

- Target
  
  62460105edf1636fd9605894deba01a417fcd8558c9a43ceefbf9fdda536a9c1.exe
- Size
  
  1.4MB
- MD5
  
  d357d6c05936c8eb6dd5bea8ac7c251e
- SHA1
  
  34680347e1bd884e50c279ef18a861a2067b7482
- SHA256
  
  62460105edf1636fd9605894deba01a417fcd8558c9a43ceefbf9fdda536a9c1
- SHA512
  
  4d90f5e274f66dc223c7d55ab2997fb217861fe4b8a683c03d3f46b767dfb4c3463cb9a62aeacef6527d3ea7f1699a5952659415eff4d7f3bdac48c0d3b2ef6c
- SSDEEP
  
  24576:tfPEX8SkcR5uPze7dH1ZkivEdLeC+fJCHLQo3u5aUC6/wA4oAH:hPEX8StRX1ZkGpCqd5a76oA
Score

10^/10

meduza stealer
- Meduza
  Meduza is a crypto wallet and info stealer written in C++.
  stealer meduza
- Meduza Stealer payload
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2