Overview

overview

10

Static

static

10

d0299b9990...8d.exe

windows7-x64

10

d0299b9990...8d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d0299b999009b5700af1cdddb60c7dd59981455b0517be4a173816e0fbc1e88d.exe

  • Size

    2.0MB

  • MD5

    463c27805e5dd59d239cf448abdb0b1d

  • SHA1

    6a55fc0c6062b77a09826233f6e8eee92685ed88

  • SHA256

    d0299b999009b5700af1cdddb60c7dd59981455b0517be4a173816e0fbc1e88d

  • SHA512

    2ac662b3d398f16ff611b2dc3682c4b0e62936cbe8f3da148e10df4208d692cf2456281c4bc71a7d5683f39a09f55fdbf747258338990647050955b87e5fa884

  • SSDEEP

    49152:eWluOKJkZt0J4Nsf0wZXeFaQ4ELmCdkwVcmqEuuLf5:enELrVcUuy

Score
10/10
meduza

Malware Config

Extracted

Family

meduza

C2

62.60.244.198

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    meto4ka

  • extensions

    .txt;.doc;.docx;.pdf;.xls;.xlsx;.log;.db;.sqlite;.kdbx

  • grabber_max_size

    4.194304e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
    meduza
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d0299b999009b5700af1cdddb60c7dd59981455b0517be4a173816e0fbc1e88d.exe
    .exe windows:6 windows x64 arch:x64

    d18aa68269a30cd13693bec0b3505c6a


    Headers

    Imports

    Sections