General
-
Target
62460105edf1636fd9605894deba01a417fcd8558c9a43ceefbf9fdda536a9c1
-
Size
1.4MB
-
Sample
240624-f35vjsyblg
-
MD5
d357d6c05936c8eb6dd5bea8ac7c251e
-
SHA1
34680347e1bd884e50c279ef18a861a2067b7482
-
SHA256
62460105edf1636fd9605894deba01a417fcd8558c9a43ceefbf9fdda536a9c1
-
SHA512
4d90f5e274f66dc223c7d55ab2997fb217861fe4b8a683c03d3f46b767dfb4c3463cb9a62aeacef6527d3ea7f1699a5952659415eff4d7f3bdac48c0d3b2ef6c
-
SSDEEP
24576:tfPEX8SkcR5uPze7dH1ZkivEdLeC+fJCHLQo3u5aUC6/wA4oAH:hPEX8StRX1ZkGpCqd5a76oA
Static task
static1
Behavioral task
behavioral1
Sample
62460105edf1636fd9605894deba01a417fcd8558c9a43ceefbf9fdda536a9c1.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
62460105edf1636fd9605894deba01a417fcd8558c9a43ceefbf9fdda536a9c1.exe
Resource
win10-20240404-en
Malware Config
Targets
-
-
Target
62460105edf1636fd9605894deba01a417fcd8558c9a43ceefbf9fdda536a9c1
-
Size
1.4MB
-
MD5
d357d6c05936c8eb6dd5bea8ac7c251e
-
SHA1
34680347e1bd884e50c279ef18a861a2067b7482
-
SHA256
62460105edf1636fd9605894deba01a417fcd8558c9a43ceefbf9fdda536a9c1
-
SHA512
4d90f5e274f66dc223c7d55ab2997fb217861fe4b8a683c03d3f46b767dfb4c3463cb9a62aeacef6527d3ea7f1699a5952659415eff4d7f3bdac48c0d3b2ef6c
-
SSDEEP
24576:tfPEX8SkcR5uPze7dH1ZkivEdLeC+fJCHLQo3u5aUC6/wA4oAH:hPEX8StRX1ZkGpCqd5a76oA
Score10/10-
Meduza Stealer payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-