Overview

overview

10

Static

static

10

2316-0-0x0...ry.exe

windows7-x64

2316-0-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2316-0-0x0000000140000000-0x000000014013E000-memory.dmp

  • Size

    1.2MB

  • MD5

    610d16683677edaca53cdc41ffb8ffda

  • SHA1

    8c4aae3c8ae7e95b18604460397306a87ea761d9

  • SHA256

    b665fcfa2688e0554b8b0acee8ef4ff0b6b8ab124c26d861209b4bac83adbf20

  • SHA512

    ef76d8730ade77b8789106d14aaf9f6e35534be1929ca124193a55f0f93c1dc2b11abce59b54078f4e566cd1fda1e10e8479e98928344079f60c79a83519f044

  • SSDEEP

    24576:HMs8x56hd8BiPp/0+1Mrjs6mZ/F7qXh0lhSMXl/qJ4Ad:ss8b6hmBipRMrjMJ1q2PC

Score
10/10
meduza

Malware Config

Extracted

Family

meduza

C2

109.107.181.162

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    458

  • extensions

    none

  • grabber_max_size

    1.048576e+06

  • links

    none

  • port

    15666

  • self_destruct

    true

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
    meduza
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2316-0-0x0000000140000000-0x000000014013E000-memory.dmp
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections