meduza | aa46a10b5392afadabb645417e88a32a95a82796b4b9517ea983ee589ed78ab6 | Triage

Sharing

General

Target

aa46a10b5392afadabb645417e88a32a95a82796b4b9517ea983ee589ed78ab6.exe
Size

1.5MB
Sample

240806-l2awnszfqc
MD5

15d9dc56b9a997471275fb1281048971
SHA1

8cc0fcec88880863806a689529a23e530167bed6
SHA256

aa46a10b5392afadabb645417e88a32a95a82796b4b9517ea983ee589ed78ab6
SHA512

e9b80928c969568fbfc03392e1859b36f1eb64e79975b8881170c9eb4c59d2b080ad715b7938bdfd617d9c833413064dd329d5e128aafdd2ffd18b162f17f781
SSDEEP

24576:n37gywC0vAr0GWnb/qKoBLgSeUs0UcRVjb+1K0XtA:376vtnlYs0Za1Kt

Score

10^/10

meduza stealer

Malware Config

Targets

- Target
  
  aa46a10b5392afadabb645417e88a32a95a82796b4b9517ea983ee589ed78ab6.exe
- Size
  
  1.5MB
- MD5
  
  15d9dc56b9a997471275fb1281048971
- SHA1
  
  8cc0fcec88880863806a689529a23e530167bed6
- SHA256
  
  aa46a10b5392afadabb645417e88a32a95a82796b4b9517ea983ee589ed78ab6
- SHA512
  
  e9b80928c969568fbfc03392e1859b36f1eb64e79975b8881170c9eb4c59d2b080ad715b7938bdfd617d9c833413064dd329d5e128aafdd2ffd18b162f17f781
- SSDEEP
  
  24576:n37gywC0vAr0GWnb/qKoBLgSeUs0UcRVjb+1K0XtA:376vtnlYs0Za1Kt
Score

10^/10

meduza stealer
- Meduza
  Meduza is a crypto wallet and info stealer written in C++.
  stealer meduza
- Meduza Stealer payload
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2