Overview

overview

10

Static

static

10

jhnykawfkth.exe

windows7-x64

10

jhnykawfkth.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    jhnykawfkth.exe

  • Size

    2.0MB

  • MD5

    d3435ebfc26894fe8b895267ca8712b4

  • SHA1

    60bcea02905c09e691043d05837e4942b8c4ae25

  • SHA256

    9bb3c3efac7be81d22c386057fe49041d7e7ef3da1974ecb987cc83eae8da103

  • SHA512

    8e884c0dcb76ca08c9674fb430b89e1bb9a3f999ac2c0078d2cefedfe72283d3249c5b9851064449294f8e39096f95c760d4c991238ed6338bb9409394872849

  • SSDEEP

    49152:kqKuOKE3tn7J8ZsN0zZQQI0qnX9eztpls0uNYe:k3nX4lnuT

Score
10/10
meduza

Malware Config

Extracted

Family

meduza

C2

62.60.217.159

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    xss

  • extensions

    .txt;.doc;.docx;.pdf;.xls;.xlsx;.log;.db;.sqlite

  • grabber_max_size

    1.048576e+06

  • port

    15666

  • self_destruct

    true

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
    meduza
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • jhnykawfkth.exe
    .exe windows:6 windows x64 arch:x64

    d18aa68269a30cd13693bec0b3505c6a


    Headers

    Imports

    Sections