General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
-
meduza
C2
-
62.133.60.92
Attributes
-
build_tag
x
- extensions
-
grabber
false
-
mode
x86
-
port
22322
-
screenshot
false
Targets
-
- Target https://github.com/akram209/akram209/releases/download/Release/Setup_installer32-64x.rar
-
Meduza Stealer payload
-
Meduza family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v15
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1