Overview

overview

10

Static

static

10

b174f3ba74...8d.exe

windows7-x64

10

b174f3ba74...8d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b174f3ba74f08dab33a60a99b4c6a1fa7d021a20b68283a15d82c84367c2c28d

  • Size

    2.0MB

  • MD5

    fd1b8111563b380cc32a3ded5cb18351

  • SHA1

    8d434615209c932c5cd9d819e60717ba40426b7f

  • SHA256

    b174f3ba74f08dab33a60a99b4c6a1fa7d021a20b68283a15d82c84367c2c28d

  • SHA512

    a9011855602c27959fd59036475e34a3e56e59042693018f11fec4f89c35e1ced6ca88f04862c467a7fc37d21a96e865605bb7b178c0ab1948386d1bcf29bc3c

  • SSDEEP

    49152:bWluOKJkZt0J4Nsf0wZXeFCn4ELmCdcwV0mqsu2Qf5:b+ELDV0cuR

Score
10/10
meduza

Malware Config

Extracted

Family

meduza

C2

150.241.92.160

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    mrfree

  • extensions

    .txt;.doc;.docx;.pdf;.xls;.xlsx;.log;.db;.sqlite

  • grabber_max_size

    4.194304e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
    meduza
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b174f3ba74f08dab33a60a99b4c6a1fa7d021a20b68283a15d82c84367c2c28d
    .exe windows:6 windows x64 arch:x64

    d18aa68269a30cd13693bec0b3505c6a


    Headers

    Imports

    Sections