Overview

overview

10

Static

static

10

6fe2d4ac4d...e8.exe

windows7-x64

10

6fe2d4ac4d...e8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6fe2d4ac4d3769d2df1b721fd3d7647701f996ca6eef5dffa07f27aa5cd743e8.exe

  • Size

    2.0MB

  • MD5

    6f2f2f4dbad9f073f4bbf6e6755a426d

  • SHA1

    8a51ad90aea76bdd1c99d52539225f6013763883

  • SHA256

    6fe2d4ac4d3769d2df1b721fd3d7647701f996ca6eef5dffa07f27aa5cd743e8

  • SHA512

    81d7e784eb294861888555a924049110a3e6d36c63244c2298cdf0a186fc665d55339a946e3b1611141b1c3945efc9801e83e4cf3e2e4326edbf944858d6edae

  • SSDEEP

    49152:KWluOKJkZt0J4Nsf0wZXeFEn4ELmCdcwV0mqsu2Xf5u:K0ELDV0cuWc

Score
10/10
meduza

Malware Config

Extracted

Family

meduza

C2

150.241.92.160

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    hdont

  • extensions

    .txt;.doc;.docx;.pdf;.xls;.xlsx;.log;.db;.sqlite

  • grabber_max_size

    4.194304e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
    meduza
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6fe2d4ac4d3769d2df1b721fd3d7647701f996ca6eef5dffa07f27aa5cd743e8.exe
    .exe windows:6 windows x64 arch:x64

    d18aa68269a30cd13693bec0b3505c6a


    Headers

    Imports

    Sections