Overview

overview

10

Static

static

3

SynapseExec.exe

windows10-2004-x64

10

bin/d3dcom...43.dll

windows10-2004-x64

3

bin/libEGL.dll

windows10-2004-x64

1

bin/libGLESv2.dll

windows10-2004-x64

1

bin/libcry...64.dll

windows10-2004-x64

1

bin/natives_blob.js

windows10-2004-x64

3

bin/report...64.dll

windows10-2004-x64

1

bin/report...em.dll

windows10-2004-x64

1

bin/report...ew.dll

windows10-2004-x64

1

bin/report...er.dll

windows10-2004-x64

1

bin/reports/cs2.exe

windows10-2004-x64

1

bin/report...47.dll

windows10-2004-x64

1

bin/report...lp.dll

windows10-2004-x64

1

bin/report...e2.dll

windows10-2004-x64

1

bin/report...io.dll

windows10-2004-x64

1

bin/report...64.dll

windows10-2004-x64

1

bin/report...em.dll

windows10-2004-x64

1

bin/reports/icuuc.dll

windows10-2004-x64

1

bin/report...er.dll

windows10-2004-x64

1

bin/report...em.dll

windows10-2004-x64

1

bin/report...56.dll

windows10-2004-x64

1

bin/report..._1.dll

windows10-2004-x64

1

bin/report...-1.dll

windows10-2004-x64

1

bin/report...-0.dll

windows10-2004-x64

1

bin/report...-0.dll

windows10-2004-x64

1

bin/report...-0.dll

windows10-2004-x64

1

bin/tbb12.dll

windows10-2004-x64

1

lib/CEF3.dll

windows10-2004-x64

3

lib/CSteamworks.dll

windows10-2004-x64

3

lib/HttpServer.dll

windows10-2004-x64

1

lib/Qt5Concurrent.dll

windows10-2004-x64

1

lib/Qt5Core.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SynapseRoblox.zip

  • Size

    57.2MB

  • Sample

    241201-1acnhssmcy

  • MD5

    8d7cb12f1b48d368e07fab21fc01de39

  • SHA1

    5dab8aa86950399e7796135ee84baee3c3696251

  • SHA256

    5fd8a58252585a3f9a6a7917c2bf7a443cc289409cc0d01bede1aa399d585b24

  • SHA512

    20f0dd218503191aff827e8793a6025d600c8ea445d029e958d254ce1d06f82848722d468ee3dcbe5a90f9403a4af6fc24c3c55d4ba449f5aedff4c90cd14887

  • SSDEEP

    1572864:/ziE5+be6mjti/cVpUa4KLyzV050UW6OHG5j/e1NgBxkVpXY:Ln4eZj/pUa4PG5nW6OIjcNPI

Score
10/10
meduzacollectiondiscoveryexecutionspywarestealer

Malware Config

Extracted

Family

meduza

C2

45.130.145.152

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    Work

  • extensions

    .txt;.doc;.docx;.pdf;.xls;.xlsx;.log;.db;.sqlite

  • grabber_max_size

    4.194304e+06

  • port

    15666

  • self_destruct

    false

Targets

    • Target

      SynapseExec.exe

    • Size

      703.5MB

    • MD5

      62bb6efbf8f88a41e59464179b2cec5f

    • SHA1

      8659fab37bbb322396246c7dae5481e3c8e187b9

    • SHA256

      2957e137ac0b2ae27077171cd0ba1df6eede546e89b61cde7a07a2348231d3f0

    • SHA512

      dc8b7d8c7ac0f2182ec43c361e63485605f36d5ac52ff21647daeec1788a1a477ee5d0b04ec86db7544ce8d8caba122ddd3152991ed0b468a4d5030d145ae5c5

    • SSDEEP

      98304:L57plQ1rRPyQRUbhFVSDoWGbqNv2OJzfIlgrSdMnH:pplMRPyQRUbhFwDp2+HfpSdoH

    Score
    10/10
    meduzacollectiondiscoveryspywarestealer

    • Meduza

      Meduza is a crypto wallet and info stealer written in C++.

      stealermeduza

    • Meduza Stealer payload

    • Meduza family

      meduza

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

    • Target

      bin/d3dcompiler_43.dll

    • Size

      2.0MB

    • MD5

      1c9b45e87528b8bb8cfa884ea0099a85

    • SHA1

      98be17e1d324790a5b206e1ea1cc4e64fbe21240

    • SHA256

      2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c

    • SHA512

      b76d780810e8617b80331b4ad56e9c753652af2e55b66795f7a7d67d6afcec5ef00d120d9b2c64126309076d8169239a721ae8b34784b639b3a3e2bf50d6ee34

    • SSDEEP

      49152:DpX9JVeE9HP6Zpy9KyhMI50Du8LljslNsHSHFUq9OiapbbO5Akb:H3P9HP6Zpy9KyhMI50Du8LljslNsyHiS

    Score
    3/10
    discovery
    behavioral2

    • Target

      bin/libEGL.dll

    • Size

      90KB

    • MD5

      50c717ab7624384b2b2d8a953263beb2

    • SHA1

      58d82865ab86a193f8f6ff1cbf7677525f6e217d

    • SHA256

      63580999b8210315b664e7742b6d4f59e587d20b4d0826072a5ef311c6f25b74

    • SHA512

      8caac7982eba6380df162b62353088339754ff211847e3921dd74f239e8a980d588b36db385acbd2ba0edcaebcfb4d272eb0405672dc158e58666b6f695a02b4

    • SSDEEP

      1536:KGP6HhCY9bVfdiVkfynyCjUzjBUpgmsWS4dMOe9dl58Zh3Cz0b:KGPG/xViVk4yOUz26KPWHiyzy

    Score
    1/10
    behavioral3

    • Target

      bin/libGLESv2.dll

    • Size

      3.7MB

    • MD5

      dd3f55559ca3eb1a89e7d696c8c5de53

    • SHA1

      ce2785277d60aa366e6faf3c3318d5767a3d949e

    • SHA256

      99f261fa5a69dd2b3bd6192aaf72a0d9f88d769a311fac87963658a7573ec669

    • SHA512

      bd47d44177970c08bb645f0e92011b2c9143c016d2baaf03a55f26e5e4fc157f1273fda49320815c0cbaa34b531c7fd1f28fa37d2486104d486063b138d75739

    • SSDEEP

      49152:oVgDuIkH0auiXZR2oWisTDLKvka5A9rC1Mw50uaj3cRhONxp7Im8TV659Zx/M70M:QgDWXv96pjkwpcTB5Vf

    Score
    1/10
    behavioral4

    • Target

      bin/libcrypto-1_1-x64.dll

    • Size

      3.3MB

    • MD5

      3390d76a13973bd46b512bf257c171c8

    • SHA1

      cd269f1f752c272e3868b4dd6dc65464715ae0b0

    • SHA256

      deb034588ef43db62809cc2c599374894bf7fef5df990da6eaaa0674fbec0301

    • SHA512

      8d714e4859ffe4beb2c6a499b4d62cd549679411b5af2b50ec4f75e522e7af1943c4c29cc5d4266409351c596c6a0bb470e4ec0301e23425191f059752458620

    • SSDEEP

      49152:cVwASOC3IU6ixBGtlqREzGbOggxFSAnVJcjp15QAMa4OHjbtNPA6UsQ0H1CPwDvF:l4+0SgbhVUsIjJW6UsB1CPwDv3uFfJ

    Score
    1/10
    behavioral5

    • Target

      bin/natives_blob.bin

    • Size

      240KB

    • MD5

      94855c31f6c24656a6d67ceae0b04cca

    • SHA1

      1d5346516d5f1f7546d4400ca3eea55022ddd9bd

    • SHA256

      20210a0e530832a0267d584015eecb331c2ac0d841faf7b36feb9d326c32c113

    • SHA512

      1043759ed4b4e1df6f05724cf5132bbcf410bc5d6ffe791ad243a6c66a577965993d72908f032805bdc14ee8b69f93417535fcc8b38bfdb006de20f7c7b0d1c4

    • SSDEEP

      3072:kUotXVrxNpyXcsR/H/UxRjh7z5/w7JrMCOL2ZHJSSC/s9a:kUopVrxNpyXcsRf/UxRjhxw7JoCOLuI

    Score
    3/10
    execution
    behavioral6

    • Target

      bin/reports/amd_ags_x64.dll

    • Size

      177KB

    • MD5

      c69e3e05bf240d7762286833e39c9029

    • SHA1

      0bc12517a8ee4173867d54081a6d26527ab62672

    • SHA256

      2449e8339e0f031bc4f954398f5917b8eb5a2d20c32d4688a083d5dd9f637ab8

    • SHA512

      655ba29b6dc96d88a188647f8b4a0dbf8dfaac2d9c33269105bc0985afb4d8bd1b8d6daa0d3cf11e6c9fd82ee174fca6d2607adf826d01da5edaa42a21266cf3

    • SSDEEP

      3072:ZbGOZiVbwfB/GT0yAajwsw3iTW2jl+uToE23JKjBaBW/L:ZbGOZ1BK0yAajw+W2jl+Al28L

    Score
    1/10
    behavioral7

    • Target

      bin/reports/animationsystem.dll

    • Size

      6.0MB

    • MD5

      0e1bf601bffc4b5e4cdd6deb75d59b83

    • SHA1

      8909467b21fb6e6095e7aa2944234518e5ed7bfd

    • SHA256

      9697e7f265210559b0cb5aa023cd0b1cfbbb50cad06d8c38905aba012bcdb229

    • SHA512

      3b87fe9fb2b8f066da6f144c2fc55f7e36b0cff2a0b88ef29a04995fd34a95b02416bb5334ab4608ee4439f71703b77eddfc10426617f3681715686558dc22d1

    • SSDEEP

      49152:QWyF999XhMwgz32urMXhLztNyDL6FMNDR/7PSIcKewd9XCFrvOWqOXFIgnHTbzXl:3sX9i207EC5gna2v7S7Qpcu

    Score
    1/10
    behavioral8

    • Target

      bin/reports/assetpreview.dll

    • Size

      5.4MB

    • MD5

      92791e8fe8f475b0f10525a93afda182

    • SHA1

      301a963889cb181777e448f9b974eaa4effc2181

    • SHA256

      386b8145f1db7797d659cddda75a4cab8ebd930d2e9c9e83474b768ad5a87e2f

    • SHA512

      d089f2bbef45e33f9f2eb680a539d089fe542171979ba87956004e20595435acd18a1c23304534d2377eaf236a358801fb2a1a400dba8c662b89ae0af3045e15

    • SSDEEP

      98304:eLILqiln5Meagy6A7Bka2RdfoUZbzkBfd:eLILrnry6A7Bka2RdfoUZ/kBd

    Score
    1/10
    behavioral9

    • Target

      bin/reports/ati_compress_wrapper.dll

    • Size

      736KB

    • MD5

      6289cb9973840bde3258392cc07b4420

    • SHA1

      84aaa5491087ffb7aa5453f48bdf3a837839f770

    • SHA256

      59b8e6afa8bd163213b63bbc8b7af18e495ddebee801ebda39ef62fd559901c3

    • SHA512

      8e64cdfa9f916b1b86a2e1798562c61d63bd13920e5d76a4a80d74f46991219961ca8354d359fcddfaba25b358254e632c73a4c74f61b444cad4fe6f10c6f0c1

    • SSDEEP

      12288:nWVwk2whmH7nU7OV/EWvpu1jvb+HE8SHs3dv/T58kr1Jmy:nEhmH7nU7OV/E4c1TMy8N8Hy

    Score
    1/10
    behavioral10

    • Target

      bin/reports/cs2.exe

    • Size

      2.8MB

    • MD5

      6c4bec50e1f595caa7f308fbe1de3c4a

    • SHA1

      fc063651fcc015100f5107fb789a2cd2a39966ff

    • SHA256

      96fb21e9e74f9c1b1bac42d0553ee9eba93e55bb6fd32a18165dc4c3d75ccd24

    • SHA512

      0e9ebcefc2018e8665be19d5620c60dbf0209e9007f00a5b6cb4a74f3c6fa3f8ea604b09d2484970034392dc6c88a9a45cc66d7c1de47a1e701ff2bf0df3a58f

    • SSDEEP

      12288:Prv+M0vksnul4PKgN6AqBCjta3CR5riFJnO+xtb5QqvcJCCFVdRTLnsJGU:TvX0Mi69SD5MJnO+xsqvcgCFVbcJGU

    Score
    1/10
    behavioral11

    • Target

      bin/reports/d3dcompiler_47.dll

    • Size

      4.1MB

    • MD5

      222d020bd33c90170a8296adc1b7036a

    • SHA1

      612e6f443d927330b9b8ac13cc4a2a6b959cee48

    • SHA256

      4432bbd1a390874f3f0a503d45cc48d346abc3a8c0213c289f4b615bf0ee84f3

    • SHA512

      ad8c7ce7f6f353da5e2cf816e1a69f1ec14011612e8041e4f9bb6ebed3e0fa4e4ebc069155a0c66e23811467012c201893b9b3b7a947d089ce2c749d5e8910c6

    • SSDEEP

      49152:D5EfJYiVk9w6hAPqzag2At6i5K/8Ub6Lg3MEq/NHiQTtVr+5kb62QgdD6zoodr7P:l7iNPWHYE+Bnm8

    Score
    1/10
    behavioral12

    • Target

      bin/reports/dbghelp.dll

    • Size

      1.5MB

    • MD5

      a5e4b3ff51cf5b7926d9651908feb666

    • SHA1

      4ef5d229709e40f3f84e46c3a28341eadbd1a044

    • SHA256

      13f0c74845318b52b76e6000564b1a99c37de48422b44ac74d034fa222c65a23

    • SHA512

      0615ff581b648715461349b1622fbc208042fc8c395cb2d271203b25b036f59edb0fc3470065dc15061af1be0fff48981f55bbea7f00c88906e9b470764a86fa

    • SSDEEP

      24576:xU5lL6v/X5lknycQFrQ8gKt/X95WqbQLZopKjMcqpzd1YWLfY:Kni/X5lknDFUCaQLq8

    Score
    1/10
    behavioral13

    • Target

      bin/reports/engine2.dll

    • Size

      5.7MB

    • MD5

      002869af9a2cacb11010ba04ebad84f5

    • SHA1

      f3c33917301c983c0635a5f89e504fe72a325ad6

    • SHA256

      a288aa28f68225c5af0aea2dbfcb9e13eea04d41383d2ee7fdc06b9a0f8bb8f6

    • SHA512

      0831366bea7122498e40b29febe311863c146eebfe2c00cb2bbcab62d39d5e29f189290dfb3806e33b03717eb8def480959cee2e8d15cc29bcb6d28a96b7d035

    • SSDEEP

      98304:cDiPlCM18Qd0z1DEIQUt6vNce2rnnOmFNkETX:S+CM18Qd0zVETxFceFm7

    Score
    1/10
    behavioral14

    • Target

      bin/reports/filesystem_stdio.dll

    • Size

      2.1MB

    • MD5

      35b2ad0e8f6f73ae8808b3b92d9e176e

    • SHA1

      d28ebd01da8494d0054d6eafec49fe219e45932a

    • SHA256

      2d86739d202c4803559c19fc6f5f8b6b44a3df5181a1075f994a4c1279c8d111

    • SHA512

      1b2520de20236cdc0e515a84ce2b093250e5c1ada61e2b2add75a58268535123ccd35c06bcef2cfa1afa716fa48cdd2cd5de4029294b6d91f06e53d9cf3c1789

    • SSDEEP

      49152:kOjPWZbTKuk214ScfZ8Jh2b/anK9GjXLmn/DnogdjnIU6iMLPQDW:kSqKB7nogds+bDW

    Score
    1/10
    behavioral15

    • Target

      bin/reports/gfsdk_aftermath_lib.x64.dll

    • Size

      1.2MB

    • MD5

      820a8d1a32385a355c8b568fe15c8a54

    • SHA1

      f53f6f4c0114f022e0fd9bd32181c2268e1cb178

    • SHA256

      38ebf6883aa8ffa94f7c1d70817aaee32a283a7a135ed3ddc383a513dee959f2

    • SHA512

      00ff27e355a03d4142c783485a8e930215ae2536c20fb4bab806f220e61488229cf96ccb668a8bf8eb280950188f99bd443181c79344ce70d608fdb36c204999

    • SSDEEP

      24576:UBKGscNMHvIajUhvPQ5sxjB7cIgTnAewIokkJMLd8lz4cV:UBKGsfHvIAUJQ5sxjB7cIgTnAzIruMWZ

    Score
    1/10
    behavioral16

    • Target

      bin/reports/helpsystem.dll

    • Size

      670KB

    • MD5

      a9bd3d9ff8cb2cc307a1ffcb9f919b65

    • SHA1

      3ec5e68ce8a61f127491e503f3dd8bec1f25d634

    • SHA256

      643762ea2a16b1ddf982e72a12c0c73263918a7fd6a8d1e81104559b39f12c53

    • SHA512

      9a29a979bf27861bdd77d77781836cc9a843d23148b98921167e33d5a643b5c7b931816690dca29206eb67666dddb47e9fd2ef550b4318cc0b77f1f09f862fc1

    • SSDEEP

      12288:NHdecaFFJZz0lvV9rW17p4ZAePX2g6S01qrF6DcizW+JJE29c6Ijx:NHdlaX3u9072iePUS08pwTzWZrx

    Score
    1/10
    behavioral17

    • Target

      bin/reports/icuuc.dll

    • Size

      2.7MB

    • MD5

      85918678c835a17cdaedd46d29674ac6

    • SHA1

      7e0a63933a9689c7d642209584c6469c57309c3c

    • SHA256

      cd4d8daa24d41f11065abdb4aeb55f48ea7597d3dff2b394d6f2679dffd38794

    • SHA512

      0dc5f5ef83e36fe9300f662a73f5f8494f94f7c13ffb0256c91b40b2c510373d6d02d28938dc4aa477f70e072e214b1700d5fd8fadc6112173b9871a69a6569b

    • SSDEEP

      24576:agg3umeOxRVVsA17DK1IP8eopS5wJaH9LoFCz7X3V8RPwJLBPPQkkkkkkkkkkiTK:agg3AO/wIPpCotoF83V89wVqB

    Score
    1/10
    behavioral18

    • Target

      bin/reports/imemanager.dll

    • Size

      205KB

    • MD5

      4f93c4f746dc1d63f770703db7deeff0

    • SHA1

      480f70454b7ba2405f5ab368e94c4e2824c300de

    • SHA256

      e24d0dd4680f6718d40ea9d8a1162a3a26de7e7b887ebae6ef61508668d0294a

    • SHA512

      a607aa48e592eae9cc64171ab824493fcf9a3b2cbbf03b7192f02b0163618be395fca364abda8a118e2f4eb672e85230af2b877f1d364f7aa0bdf69640aa2f76

    • SSDEEP

      3072:O8XLciiW3n0aO65ToGGBXKEa5do2Gf3Z2tVa22wiAyfxvsYnS7JyRs49G/5:O8XLDiWX0fWJKXKr5OrfHBsYnwyuYs5

    Score
    1/10
    behavioral19

    • Target

      bin/reports/inputsystem.dll

    • Size

      233KB

    • MD5

      df3b8e5a137b25fcfe27c692f1583a0a

    • SHA1

      32b3403e8609d64ac12a3aeee03e02fb6b6f481f

    • SHA256

      6cd9083a31bbfe15d8aa7b2dcea6298e1d8e67d913b070d49e7f4db919968cdb

    • SHA512

      85c5f59dedc0af81d3ff132b54a050954f7333ff9b5a495c54a06714a2b75b60da14971b4bbd81592f0077a28069899cb44d3cb261d5105dcc50e2a5cb33fef0

    • SSDEEP

      3072:7TcDVsDoAQEN/8UJmmAE5yEMRUVrZiXv1b6aKQMafs2Ovscqd3yRyY8CMgC/W:v2ehVAE0EM+V16vRBSqd3yAYCgYW

    Score
    1/10
    behavioral20

    • Target

      bin/reports/libavutil-56.dll

    • Size

      1.5MB

    • MD5

      ee4cfd80e0c56a67ffdf11c497d95934

    • SHA1

      ad6e28014dedf231a8fb8a290c9b840c53812d72

    • SHA256

      114622d5f56bc8c27d2dc01059e4ea975069643f5d0f24da585f62854191bb1b

    • SHA512

      bdf1210a5b3342f800064ba2d0d3247484c67431945cee727c424acb9d17e4aba290b409ffecf1b2ea6420c34225b7011d8b05e4eee61f742bae81276e9ef619

    • SSDEEP

      12288:h/Jmk+zrElQnWZaT7H/jc4fOf0ethf1jVSpdG4QICMb4cFoii8XUvHZdPW:hhP+jyaTjQ40JVS7ZQI66VUvHTPW

    Score
    1/10
    behavioral21

    • Target

      bin/reports/libfbxsdk_2020_3_1.dll

    • Size

      9.5MB

    • MD5

      4c38920a15cf1b4cd1610e54fe0e6f6f

    • SHA1

      76a59506aa2c0665d3c1ef6b6b7e94e468803eea

    • SHA256

      474abba2d946573bbd32f39baf39a295c6fd6cd6a4a58825651a7bd2cd8fed3f

    • SHA512

      087a2557d36f4f2276567e576f6a680e4bd071bd4a78418130b6a12765daf62d22521aadaaa07b6906731dedcb7f2eebd4f28aa592775e331ad56c6e02f894ca

    • SSDEEP

      98304:kNmPdr9X8C8hMRE9mt4YrxB5Nz7lFagIPFXjUXy:k+5F8hMRE9mCa7z7LagOFzN

    Score
    1/10
    behavioral22

    • Target

      bin/reports/libfontconfig-1.dll

    • Size

      481KB

    • MD5

      602e04d9c77674fb0b44a98131cb93b7

    • SHA1

      e9484f578c843b9cc4461ed1694e4135b94c2c27

    • SHA256

      209507f621bf5cd09422a4d9cf2a027af0f7aa7cf7c9dc82fd98ef4b86b4bc46

    • SHA512

      1d34a3a5829def7cc326aae325ccc946809d7918d8a3e15e9517a73305409d0f956c1f05df874f1a4841aa858e18d99e899ef792eb6cd05780d5cb6cac419e8a

    • SSDEEP

      12288:GuR5d8h9uXkrFJwJOIOkNRZoNWhTQAkfaeqdLHV6JtMg+:GuR5d8XBUxOkyNWhTQadLoX+

    Score
    1/10
    behavioral23

    • Target

      bin/reports/libgobject-2.0-0.dll

    • Size

      326KB

    • MD5

      d5cda375800b2ea724d18442480c755a

    • SHA1

      59a0af193639db6cba978482d1802346ea3cd196

    • SHA256

      166ce8496289ebe41cd624e24ba99a5856402141d1f095359314d853581ab22a

    • SHA512

      ddde13501af8d48638abeff00c91c38cab170202b97aa11846db707297ee5d7c0c646329ed4f257c7f4f762359ccfaffc79eb82a818356239d45bea2be18a3ac

    • SSDEEP

      6144:4eTEnBiAdtPiHTeCOxZQV8dbATFi5QpSgmUQ+IgneFEiunGMKGV4J:ZEnBi2iHTnObQV81RqiAKGA

    Score
    1/10
    behavioral24

    • Target

      bin/reports/libgthread-2.0-0.dll

    • Size

      92KB

    • MD5

      dc183fed61b2d993027302ff97ede9d4

    • SHA1

      c98a1eafa31dced7457600270c3271ba9ea60650

    • SHA256

      6dea26270e891756ca78422c289cf77c6780194e541598ff91c3b73c124c249c

    • SHA512

      d8ad1145a323763c3b4b5ada9946fcb05b91aace19b91cd0414fe64a934a8e8716396fba4a7809f4300df0098fc08710ae7013d741e374d38dbf5f71740af63e

    • SSDEEP

      1536:BT0LHnE9YFcK6QtDIhxI9Z8woIOd/RMPvX/7q78MipKw3otmvwFOkp3IursnoNH8:BT0znE9YFcWVIhxI9Zutd/SPX6wKw3oq

    Score
    1/10
    behavioral25

    • Target

      bin/reports/libmpg123-0.dll

    • Size

      343KB

    • MD5

      3f7eaeae23e4314139b52979c9a18702

    • SHA1

      4e64337033f6a7db7d0355c6a2b54c0cbc037e3c

    • SHA256

      24e71004d29377b42a5145acdac4195da073a3a0b8e96d9a37b286fb09b2cba7

    • SHA512

      e0090dc693711ea5fa061b6dcc9bd7f0f81f281b000b3d77ad2c4777a367fa3f7c3d0628668d0f6afabad8fc05c508f5014198de79b6cc4e2b890d2e916516ff

    • SSDEEP

      6144:Mb9EIu7V5XCvMGyyXts3Hilvqj5euBtYJFSv+:Mb9pYXCUGyv3HWv0HIJFSv+

    Score
    1/10
    behavioral26

    • Target

      bin/tbb12.dll

    • Size

      374KB

    • MD5

      123404fa3ab377e006e8bb777dc58b36

    • SHA1

      f716b9bc1dd30bd903c377de8ba08d1dee2827c0

    • SHA256

      061f3b283b3e5b24c5ac45772ee19e2f4b24cdacb3ff8ae4f815fe62836e5a45

    • SHA512

      4762511c8f75f0ee88e0b0c030fc4ded3681bd95f57b44d858a5f97bfb918d8f51df7fbed2fd473e3bd491ffec4dc1a290c3894a985cd2d7a959de140659782e

    • SSDEEP

      3072:LMz+pybccWv9lxKs66IYtmm17NakuCzbLModItR4KzdyHohj6bdJ9qDyh6tm4MBS:LMqpyOlxKOmm17NfLPSwKL8ItmhxpLO

    Score
    1/10
    behavioral27

    • Target

      lib/CEF3.dll

    • Size

      695KB

    • MD5

      1340a58ff6cf1847f322e405761abab1

    • SHA1

      c2861973d7371e7eba69a9ccbb32172c982a09bd

    • SHA256

      8c70385d509677b3a501f2b708e5f6178544405ad88357869a166e9913d46baa

    • SHA512

      a6605c37e3741b9e3424d7cce9f10c535248f227f90995fae4b729812597b1f9350170e29c6200d77d3d21709bcea756c3839fcf81965752389999055c1905b5

    • SSDEEP

      12288:antsZ5qc7rU0oHg5I16p6mRnBAvrXS7wd:a+qc7rloHg5I16p7nBAvEwd

    Score
    3/10
    discovery
    behavioral28

    • Target

      lib/CSteamworks.dll

    • Size

      117KB

    • MD5

      cd09cdd6fe37e2e30ecbad5663df5523

    • SHA1

      0e4f1dbc4a5bdaed8629651fa9f9599141085e08

    • SHA256

      21da08ace79c2443067180ec7efcf5358d21d79e2befa8ffe217541edf02acf1

    • SHA512

      42523b2a3eb1185584bc81896e772c644602842ab5dbdc7d6358045afa5b25a39aa1157c4841a9990dfb0070502d52866dd679f171821b70218ddb3da1616de7

    • SSDEEP

      1536:I7GrXp0h5u3iAzEB3OOUlFaP4enQBVbctQbU+NH06YUWrSJyyC:I7GrXp0/uyOcUPbVbEQgi0brSQyC

    Score
    3/10
    discovery
    behavioral29

    • Target

      lib/HttpServer.dll

    • Size

      168KB

    • MD5

      8a4a581ea13389c0de4f074d9356cdb5

    • SHA1

      7959c191345a101e44bd405525fccc1673a4031f

    • SHA256

      cef2b90e93aced611df477cdfa6eaa358850375b4061142012bbef8eac96751a

    • SHA512

      0ad0e5f7bb9000ea7597d3f53b0ea572c71f4c0737ef396c204c7c8038730a43494823fe6969f99048210414dbc041704b639a5c9852957b2cfcb02a0cd25c68

    • SSDEEP

      3072:GOzneiLHIf0k6eGTup/Sn0XnGTVDkFl0TgbWKSXkzM/du74A4:jnei7ISeIup/jXn+864

    Score
    1/10
    behavioral30

    • Target

      lib/Qt5Concurrent.dll

    • Size

      128KB

    • MD5

      31955f92dd3ca70cab821b6199018ebf

    • SHA1

      3177661f6e066460f2c859d2d5453323b68d6eda

    • SHA256

      d4a01961fff02cc38ab906d3bffaeb49db893edc624f840e06d07985086db29f

    • SHA512

      ec5b65741685882008769abd68fb88cf12c58b0b9d76f0a6326f352ee7a78cc4567473c50e9abe12fd8af0c06bb1ae9840ee0d5f78024580aaaf1c34e0b14504

    • SSDEEP

      3072:3Q8Eh7XgsZxlePu00k7hkNKSBMU+m3EkbnW6//V:3rg7wmePu01CXrUkV

    Score
    1/10
    behavioral31

    • Target

      lib/Qt5Core.dll

    • Size

      6.0MB

    • MD5

      c49ac6ad9630be526b2f9c3a9f094b53

    • SHA1

      5f5173c825810bbd849e32b5e6e2cb32f6c456d2

    • SHA256

      b72018655360463896edbd86b120be6dfa7235ae8a0aaa728165cb496573acb9

    • SHA512

      31ac473ddd3a7d4b93b9e5d023c5fa964543683b9a0429381e0ab30079a0bea39c77196533d1f94381a787ddbeae28087861f450a23b10a79192cc80cc6c9d66

    • SSDEEP

      98304:T9eXMaQVsUlo3PakaZJsv6tWKFdu9C7izxqfhSsbyMI:EXMaQVsUlmjaZJsv6tWKFdu9C72xqfh2

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

meduzacollectiondiscoveryspywarestealer
Score
10/10

behavioral2

discovery
Score
3/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

execution
Score
3/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10