Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
https://www.mediafire.com/file/jiyslmakevjvdwq/Software_v1.24_loader.zip/file
-
Sample
241108-qmlf3stakg
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.mediafire.com/file/jiyslmakevjvdwq/Software_v1.24_loader.zip/file
Resource
win10v2004-20241007-en
22 signatures
150 seconds
Malware Config
Extracted
Family
meduza
C2
109.107.181.162
Attributes
-
anti_dbg
true
-
anti_vm
true
-
build_name
420
-
extensions
none
-
grabber_max_size
1.048576e+06
-
links
none
-
port
15666
-
self_destruct
true
Targets
-
-
Target
https://www.mediafire.com/file/jiyslmakevjvdwq/Software_v1.24_loader.zip/file
Score10/10-
Meduza Stealer payload
-
Meduza family
-
A potential corporate email address has been identified in the URL: [email protected]
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-