Resubmissions

14-11-2024 11:38

241114-nrpyysxrbs 10

28-09-2024 21:15

240928-z399tazbpe 10

28-09-2024 07:15

240928-h3mebatakq 10

General

  • Target

    responsibilityleadpro.exe

  • Size

    1.1MB

  • MD5

    1a0d1a5b8d79608abd5e5c4e17a6984d

  • SHA1

    53684af4212c1a2c36df047de09319dec585f987

  • SHA256

    545dce672f9a6cad9aa56f689a50403bebd68ca99c2a6b8806b28025f8b3b0a0

  • SHA512

    126b4ab447a4548c44a90d5846736c2a1d38d0be3b054e8b6675c8e88ec253899fd60629f9403f303d0757e5be045d6a386be806ae7be954058aad92c9d1a7f1

  • SSDEEP

    24576:BBZ3miL8N5aJO9bEO6R2L9AMaq15jQmzXrbvofFx1G6d7T+n:B3miL8mO9bEO6R6kSjQ03oY8T+n

Score
10/10

Malware Config

Extracted

Family

meduza

C2

176.124.204.206

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    Mou

  • extensions

    .txt

  • grabber_max_size

    4.194304e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • responsibilityleadpro.exe
    .exe windows:6 windows x64 arch:x64

    2c34752585cf27cdff9273031768b19e


    Headers

    Imports

    Sections