Overview

overview

10

Static

static

10

8350b1c8cd...79.exe

windows7-x64

10

8350b1c8cd...79.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8350b1c8cd82e06444bd6c89f1b25f1415b18eb60893a5f9bf80432963da5679.exe

  • Size

    2.0MB

  • MD5

    3ae06ab23868319d57698df9b29435c6

  • SHA1

    a759297fd4dfc56c9ca9fabd77d3e6b7eadfe090

  • SHA256

    8350b1c8cd82e06444bd6c89f1b25f1415b18eb60893a5f9bf80432963da5679

  • SHA512

    4c29c51238be655414800bfe0ee389083895d53c90ac9b71cf87730b8e302b6caabb9130370c38cec134f4e3848a2e9feba9782b3f72a5bbe6b5f4334c46cd20

  • SSDEEP

    49152:aWluOKJkZt0J4Nsf0wZXeFen4ELmCdcwV0mqsu2sNf5q:aGELDV0cuzE

Score
10/10
meduza

Malware Config

Extracted

Family

meduza

C2

150.241.92.160

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    kanew

  • extensions

    .txt;.doc;.docx;.pdf;.xls;.xlsx;.log;.db;.sqlite

  • grabber_max_size

    4.194304e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
    meduza
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8350b1c8cd82e06444bd6c89f1b25f1415b18eb60893a5f9bf80432963da5679.exe
    .exe windows:6 windows x64 arch:x64

    d18aa68269a30cd13693bec0b3505c6a


    Headers

    Imports

    Sections