Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5d5be2d807ae58e049ea38dc8fa0d084d63d3acedb1bfe47a0befcc6e14c95e3

  • Size

    1.2MB

  • MD5

    2641c36c0e8205672c3b20a4bb79e802

  • SHA1

    8a8c7312e275ea2ffb9b73a46a057fa31669c371

  • SHA256

    5d5be2d807ae58e049ea38dc8fa0d084d63d3acedb1bfe47a0befcc6e14c95e3

  • SHA512

    b3fecd5958ed1960a885f285d63aff2593bec3da54192e2a3674ec843132da98419f1cc414532a61d8e91e43ba89e13a658c239f7bcfd0694ab33ad8c66b2399

  • SSDEEP

    24576:4kazQhNR3fNR84iv88LT6T6h0lhSMXlRg2r:LaMhNR1m4ivLv6TXhJr

Score
10/10
meduza

Malware Config

Extracted

Family

meduza

C2

109.107.181.162

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    424

  • extensions

    none

  • grabber_max_size

    1.048576e+06

  • links

    none

  • port

    15666

  • self_destruct

    true

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
    meduza
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5d5be2d807ae58e049ea38dc8fa0d084d63d3acedb1bfe47a0befcc6e14c95e3
    .exe windows:6 windows x64 arch:x64

    807eb81070e31b6f9cabdbf275ed06f5


    Headers

    Imports

    Sections