Overview

overview

10

Static

static

10

1016-8-0x0...ry.exe

windows7-x64

1016-8-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1016-8-0x0000000140000000-0x000000014013E000-memory.dmp

  • Size

    1.2MB

  • MD5

    e673f4e427cf8babd709ceb4b9713418

  • SHA1

    77fc2ee76cc46f6c5b8592aadee5552163dea7a2

  • SHA256

    1dafdede62b47cf8019c873734eb38c2f229530cb15697174cc8cab074b4a307

  • SHA512

    777e0c56de859cea9ee9a95c65cc7479614a238ddd340a13534956a1676dfdc598d945f702cf77c3d16617dfa6d8b6b50d6b1b34295321be03db6c54d7f77776

  • SSDEEP

    24576:VAy1Wvw5FYVBdlJMhLfAKMA48kZu0deah0lhSMXl1Hx:2y1kw5ichLf6AvYD83FR

Score
10/10
meduza

Malware Config

Extracted

Family

meduza

C2

89.22.239.174

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    hellnov

  • extensions

    .txt

  • grabber_max_size

    4.194304e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
    meduza
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1016-8-0x0000000140000000-0x000000014013E000-memory.dmp
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections