General

  • Target

    7ba61f3706d900ad4fdf101227727b88ed4da64147d1bdea8b2e9d88e3e73b15.exe

  • Size

    1.2MB

  • MD5

    1a2e3cefb9b08af38db92cab7264f6b3

  • SHA1

    e31ab02e4a2cfb5dfbc8bc33c6e392bcb03c2bc3

  • SHA256

    7ba61f3706d900ad4fdf101227727b88ed4da64147d1bdea8b2e9d88e3e73b15

  • SHA512

    4ff510a5530227b35d5cdc5efc3fdb8c6531c1a785519379175fd9fc167f20a9f9444f419cedde3a2215cf0836025357e363315b8422d7d198a7f96727671a16

  • SSDEEP

    24576:l5Uah/dTnglhmsqrKPYS1gm7K87h0lhSMXl1vN:nUaldTUcsqaYwh/Kl1

Score
10/10

Malware Config

Extracted

Family

meduza

C2

147.45.44.212

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    mounow

  • extensions

    .txt;.doc;.docx;.pdf;.xls;.xlsx;.log;.db;.sqlite

  • grabber_max_size

    4.194304e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7ba61f3706d900ad4fdf101227727b88ed4da64147d1bdea8b2e9d88e3e73b15.exe
    .exe windows:6 windows x64 arch:x64

    674c15ed1eaebfd2be4ff06070cd7c50


    Headers

    Imports

    Sections