Extracted

• • Target

    gta_online_modmenu2.8.exe

  • Size

    692.3MB

  • MD5

    7a0775e3b7824f08f45b0d330d2fb85a

  • SHA1

    65aa9479bad9f3f272d7ba13196e614ada3136b0

  • SHA256

    498c5a2baf821f1b8f867bdfddbef15949188286634f1bed85f7d9bfd384f3a5

  • SHA512

    4963154a1729e9585a1a5ad93b30c688b302f707a14bb010d138e26f7ac28a50aa396c82df94edca1fc8c2f983ceafa9a806d4e8954b06326ed60161af599c8e

  • SSDEEP

    6144:WvhV7it3d5f4AVB9YLex21fb65XbiDcxs/vp3sFLIlGWMV2Tebx2ibFD6204VU:wOvSAz97u0RxO53GDUK5Dk

  Score

  10^/10

  meduzacollectiondiscoveryspywarestealer

  • Meduza

    Meduza is a crypto wallet and info stealer written in C++.

    stealermeduza

  • Meduza Stealer payload

  • Meduza family

    meduza

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2