Overview

overview

10

Static

static

3

643dde3f46...d2.exe

windows10-2004-x64

10

Resubmissions

11/10/2024, 07:00

241011-hsnvds1aqa10

07/08/2024, 08:37

240807-kja82syfka10

07/08/2024, 08:30

240807-kd6g1ayemg10

Sharing

Copy URL Twitter E-mail

General

  • Target
    0aeaf8afee14d5be2425ed7826c7895b1c318397ab7f3bb1523a9b62061c1ef8
  • Size 1.1MB
  • Sample241011-hsnvds1aqa
  • SHA256 0aeaf8afee14d5be2425ed7826c7895b1c318397ab7f3bb1523a9b62061c1ef8
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
meduzastealer

Malware Config

Extracted

Family

  • meduza

C2

  • 5.42.107.78

Targets

    • Target
      643dde3f461907a94f145b3cd8fe37dbad63aec85a4e5ed759fe843b9214a8d2
    • Size 2.1MB
    • SHA256 643dde3f461907a94f145b3cd8fe37dbad63aec85a4e5ed759fe843b9214a8d2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    meduzastealer

    • Meduza

      Meduza is a crypto wallet and info stealer written in C++.

      stealermeduza

    • Meduza Stealer payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks