Overview

overview

10

Static

static

3

SecuriteIn...31.exe

windows7-x64

10

SecuriteIn...31.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Win64.CrypterX-gen.2448.5331.exe

  • Size

    1.8MB

  • Sample

    241102-xal1eavmel

  • MD5

    8e2766a1d5ffabdae6603d9dffc5d4bf

  • SHA1

    45f1bedf90db66c5af35e80f93d8d0a6181485a5

  • SHA256

    127a36b98ea43a374146a0dd7bef8a0323db12a6a74eff3290d3974a1f077714

  • SHA512

    adc31e9fe214424f80604383be44b8d9ec9dfd8a5c968dd5b037f0df757e99bb071ceb0019bf98c6b169f7fe328db7fe84a7f1586504fc0e4281830279eb1ecd

  • SSDEEP

    24576:u8tBJcvtGlZdN1/Pzl2TFh0lhSMXl1M9uBcbKVqjXRNdZWa3EAZWDpiE:LtBJcsH/m9uBJOBTQa5Z6

Score
10/10
meduzastealer

Malware Config

Extracted

Family

meduza

C2

176.124.204.206

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    mounew

  • extensions

    .txt

  • grabber_max_size

    1.048576e+06

  • port

    15666

  • self_destruct

    false

Targets

    • Target

      SecuriteInfo.com.Win64.CrypterX-gen.2448.5331.exe

    • Size

      1.8MB

    • MD5

      8e2766a1d5ffabdae6603d9dffc5d4bf

    • SHA1

      45f1bedf90db66c5af35e80f93d8d0a6181485a5

    • SHA256

      127a36b98ea43a374146a0dd7bef8a0323db12a6a74eff3290d3974a1f077714

    • SHA512

      adc31e9fe214424f80604383be44b8d9ec9dfd8a5c968dd5b037f0df757e99bb071ceb0019bf98c6b169f7fe328db7fe84a7f1586504fc0e4281830279eb1ecd

    • SSDEEP

      24576:u8tBJcvtGlZdN1/Pzl2TFh0lhSMXl1M9uBcbKVqjXRNdZWa3EAZWDpiE:LtBJcsH/m9uBJOBTQa5Z6

    Score
    10/10
    meduzastealer

    • Meduza

      Meduza is a crypto wallet and info stealer written in C++.

      stealermeduza

    • Meduza Stealer payload

    • Meduza family

      meduza

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks