Extracted

• • Target

    Panel.exe

  • Size

    526.9MB

  • MD5

    6a683ece84181f6b32980177840d3e24

  • SHA1

    1116d53133e9c010ed98116ede1a29927f7b0920

  • SHA256

    e9772d2d021c030a2a8685fcffc721a2a0fb94a65b13d097725e6a1e5419e395

  • SHA512

    14a46fcbe64ce22ed628572eb02d2fd8ec35d2fcf09073910c05819526adc3fa02930b1d7bb88462c5c72fd87194779f90e867e668b49532fcc6ff4832c9e8d7

  • SSDEEP

    98304:0JxFqrqnIGHYeUt7wSTsEitaAo4N/nl3x0NlBuQa3HUQ:wxFqrqnwtwSccAoKl3fQa3

  Score

  10^/10

  meduzastealercollectiondiscoveryspyware

  • Meduza

    Meduza is a crypto wallet and info stealer written in C++.

    stealermeduza

  • Meduza Stealer payload

  • Meduza family

    meduza

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2behavioral3