Overview

overview

10

Static

static

10

markiz.exe

windows7-x64

7

markiz.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    markiz.exe

  • Size

    1.2MB

  • Sample

    241227-gj57mssnbm

  • MD5

    bee040fc0caf73ee0cb2e55d4c703f22

  • SHA1

    6bf7f1fa9dcf930190cabfba9abde2e7faab486f

  • SHA256

    940d413dd95bc28d5c724d814f2cd1ecca005d2cb58ed28788d9c07d962d829b

  • SHA512

    ec45afc4a8626dc813462a3c65b57a75f96233e9e66a0d9d60953fa2e29ec1a1c48c9ccf00f8f0e0ad3ff37e8c98c673c5b2309ff77475896ec57897d73551b2

  • SSDEEP

    24576:cgAMXnXkciEIMJQZo8Us9Mjemp5wx1wach0lhSMXl52T+d:93Xn0ciEIpVUs+egSx+ahp2TK

Score
10/10
meduza

Malware Config

Extracted

Family

meduza

C2

193.3.19.151

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    mrfree

  • extensions

    .txt

  • grabber_max_size

    4.194304e+06

  • port

    15666

  • self_destruct

    false

Targets

    • Target

      markiz.exe

    • Size

      1.2MB

    • MD5

      bee040fc0caf73ee0cb2e55d4c703f22

    • SHA1

      6bf7f1fa9dcf930190cabfba9abde2e7faab486f

    • SHA256

      940d413dd95bc28d5c724d814f2cd1ecca005d2cb58ed28788d9c07d962d829b

    • SHA512

      ec45afc4a8626dc813462a3c65b57a75f96233e9e66a0d9d60953fa2e29ec1a1c48c9ccf00f8f0e0ad3ff37e8c98c673c5b2309ff77475896ec57897d73551b2

    • SSDEEP

      24576:cgAMXnXkciEIMJQZo8Us9Mjemp5wx1wach0lhSMXl52T+d:93Xn0ciEIpVUs+egSx+ahp2TK

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks