General

  • Target

    fecfdf7229531ca96839fdaa44d0c28b.exe

  • Size

    1.2MB

  • MD5

    fecfdf7229531ca96839fdaa44d0c28b

  • SHA1

    17de35617a0898612971c450a54418a200b4f5ab

  • SHA256

    d510497588fe468e45119bf8a094b1be3a9eb2e78e26ddfdc1466911bab8b629

  • SHA512

    fbc8e001a6c875f741cc05fd87e402cf06dcba8ec7ef8b1a91ff1955d67a87e43a2021331b316b3a73c476db08595a05b28c65dcbdfe46c4d8f5d7f69826c1f9

  • SSDEEP

    24576:gKRjZgSemwfAtN+qKCpx9Pm7ort8JLuo/AehkSmDuBfUh0lhSMXlwGd:gAgSemw8N+qKC1eiCJLuoJh10uXb

Score
10/10

Malware Config

Extracted

Family

meduza

C2

109.107.181.162

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    minefracfer

  • extensions

    .txt

  • grabber_max_size

    1.048576e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fecfdf7229531ca96839fdaa44d0c28b.exe
    .exe windows:6 windows x64 arch:x64

    2904672a66bc333ceea7679a11f8008e


    Headers

    Imports

    Sections