Extracted

• • Target

    seed check/1_seed-check.exe

  • Size

    2.7MB

  • MD5

    fe8642ef05544492aa7bea74dd228442

  • SHA1

    9cd835042a5feed668604d4f4aca415ff8af9532

  • SHA256

    2ec5235af12345ee05668337a7607bcc4b28cf2409d006fbdf749c2ff6275e3b

  • SHA512

    648155f46994ab9738ab8bcfc49f5bb4db35acde3ecfc324934dac2d4645446d1be04cd39ab014bd9071a8e7ffd38891c225b7330b1c71a702c60f8cb6d6d367

  • SSDEEP

    49152:NPw34yFJzSdhPzD0mOd4606hU6HznKpHaeUGnVn641aibkcrh8A:q9mOd46GHaeUQhVp

  Score

  10^/10

  meduzacollectiondiscoveryspywarestealer

  • Meduza

    Meduza is a crypto wallet and info stealer written in C++.

    stealermeduza

  • Meduza Stealer payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    seed check/avax_nft_.dll

  • Size

    4.9MB

  • MD5

    c554d8572ce8619ec94597fcbfef09d7

  • SHA1

    b2e2fbfbe4e3747d824f5d6cabb5607275559929

  • SHA256

    2e16f7eb5e8aa4ef66a1c0cc5e4b72290c3182d6f3d0a71f32d13fd2db732ef5

  • SHA512

    73c08723319ebddc2023ea1436c27583894834f6667640de09c967cf149e7d564486ede7d256abad4987e6b4a30b994383095a2c969069a71be481531790a85b

  • SSDEEP

    49152:jfbOajjkPV5M6BEng14kVsAtLMu5fnChs/V7aqONj9o0eXDRNnxfJtqUrSPNk/0R:GajjQ5M6Bcg1uAt3/VuqON

  Score

  1^/10
  behavioral3behavioral4

• • Target

    seed check/bnb_eth_poligon.dll

  • Size

    685KB

  • MD5

    081d9558bbb7adce142da153b2d5577a

  • SHA1

    7d0ad03fbda1c24f883116b940717e596073ae96

  • SHA256

    b624949df8b0e3a6153fdfb730a7c6f4990b6592ee0d922e1788433d276610f3

  • SHA512

    2fdf035661f349206f58ea1feed8805b7f9517a21f9c113e7301c69de160f184c774350a12a710046e3ff6baa37345d319b6f47fd24fbba4e042d54014bee511

  • SSDEEP

    12288:U9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3Q5:U8m657w6ZBLmkitKqBCjC0PDgM5A5

  Score

  1^/10
  behavioral5behavioral6