Overview

overview

10

Static

static

10

1444-4-0x0...ry.dll

windows7-x64

1

1444-4-0x0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1444-4-0x0000000000810000-0x0000000000953000-memory.dmp

  • Size

    1.3MB

  • MD5

    0e1438ea1b2d791970aae81157e1aa2d

  • SHA1

    dd3d04f8cdd6e79c02e572727cba26196ca367c5

  • SHA256

    69ed923ee8382f46f14a7c02efde7f093b9255368fa970999554e60bd9083c4f

  • SHA512

    46f337990801f06a7bc60d2c3999e4a0b4daf9ce293263b99e0bdbc4b2fd7074ba3cc06a05f68485bf1d817039102817e79563574d7a90861ea29c4e9247a57d

  • SSDEEP

    24576:qqKFWNKEKlySPpUcSE7e/9KfHfwcvRSRmAiFhh0lhSMXlvG00r:nNKEKlNpUcSE72qfwcvRofMoO

Score
10/10
meduza

Malware Config

Extracted

Family

meduza

C2

176.124.204.206

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    hellsingnew

  • extensions

    .txt

  • grabber_max_size

    1.048576e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
    meduza
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1444-4-0x0000000000810000-0x0000000000953000-memory.dmp
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections