General

  • Target

    e98483a35c12aa3be40ffd3b3ed88337.zip

  • Size

    522KB

  • MD5

    e98483a35c12aa3be40ffd3b3ed88337

  • SHA1

    991570d4f116f6411ecfc2e6f715628cddd1c5a1

  • SHA256

    add7e0536d612cc4022407c06ecd8b66ab4c826aaa454cc76f5845241e8c7602

  • SHA512

    5fa13f748c546739919db385c0eaa2611472d3b83ecee770b03f924892298dbe711a8c753320c5e88e5c2c39269815293291bfeb018b29e1cab71d979e7476b2

  • SSDEEP

    12288:FXal/PF7QO0Gs/1Hg+S849FGi+G+RWDbw2LxG:FXal/PZ+G81Hg+eeJ

Score
10/10

Malware Config

Extracted

Family

meduza

C2

109.107.181.162

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    creditcard

  • extensions

    .txt

  • grabber_max_size

    1.048576e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e98483a35c12aa3be40ffd3b3ed88337.zip
    .zip
  • creditcard.exe
    .exe windows:6 windows x64 arch:x64

    2904672a66bc333ceea7679a11f8008e


    Headers

    Imports

    Sections