General

  • Target

    f3cb381e29fe29872b86838500dc6ee2f810865bf5a0b1cd4718b0036c3d51a5.exe

  • Size

    1.2MB

  • MD5

    c823ef8ad9ba037644cb58dec685bae5

  • SHA1

    086b12a56bcb227fb230e49a2f84e7d223325a13

  • SHA256

    f3cb381e29fe29872b86838500dc6ee2f810865bf5a0b1cd4718b0036c3d51a5

  • SHA512

    4d9ee7d83dcdbce338dbbfef58ca06e6b835b0b0c1cc306034dd5dcc0a91fb4aad47c38b9a21e2baf3e15e3a00c904df0e3a527da4da9904f07fae023490f693

  • SSDEEP

    24576:OgAMXnXkciEIMJQZf8Us9Mjemp5wx1wach0lhSMXl5+T+d:T3Xn0ciEIpkUs+egSx+ahp+TK

Score
10/10

Malware Config

Extracted

Family

meduza

C2

193.3.19.151

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    kanew

  • extensions

    .txt

  • grabber_max_size

    4.194304e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f3cb381e29fe29872b86838500dc6ee2f810865bf5a0b1cd4718b0036c3d51a5.exe
    .exe windows:6 windows x64 arch:x64

    0095cfee1cdfcef936c4c086b6b4fe85


    Headers

    Imports

    Sections