Overview

overview

10

Static

static

10

b056dd707d...12.exe

windows7-x64

7

b056dd707d...12.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b056dd707d21bd57b256767dc3e13cd8c824cf059ca70f13e2cda9f96b101012.exe

  • Size

    1.2MB

  • MD5

    b467cf8ca0c4a745c53f4bd42edd79a7

  • SHA1

    762bbadff23c875ebcea557a93c55b45624d5171

  • SHA256

    b056dd707d21bd57b256767dc3e13cd8c824cf059ca70f13e2cda9f96b101012

  • SHA512

    d78a471eeac8f1ceae0b7b727c17d575f49f29eff62546b6f9808cdd9e4926a395bf74973156f2cdf4bc1a10d5adc6c5170e1b6caf0556cb673f31a34466d1f8

  • SSDEEP

    24576:CKRjZgSemwfAtN+qKCpx9Pm7oKh85Luo/AehkSmDuBfUh0lhSMXlwGS:CAgSemw8N+qKC1eX25LuoJh10uXb

Score
10/10
meduza

Malware Config

Extracted

Family

meduza

C2

109.107.181.162

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    creditcard

  • extensions

    .txt

  • grabber_max_size

    1.048576e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
    meduza
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b056dd707d21bd57b256767dc3e13cd8c824cf059ca70f13e2cda9f96b101012.exe
    .exe windows:6 windows x64 arch:x64

    2904672a66bc333ceea7679a11f8008e


    Headers

    Imports

    Sections