General

  • Target

    markiz.exe

  • Size

    1.2MB

  • MD5

    bee040fc0caf73ee0cb2e55d4c703f22

  • SHA1

    6bf7f1fa9dcf930190cabfba9abde2e7faab486f

  • SHA256

    940d413dd95bc28d5c724d814f2cd1ecca005d2cb58ed28788d9c07d962d829b

  • SHA512

    ec45afc4a8626dc813462a3c65b57a75f96233e9e66a0d9d60953fa2e29ec1a1c48c9ccf00f8f0e0ad3ff37e8c98c673c5b2309ff77475896ec57897d73551b2

  • SSDEEP

    24576:cgAMXnXkciEIMJQZo8Us9Mjemp5wx1wach0lhSMXl52T+d:93Xn0ciEIpVUs+egSx+ahp2TK

Score
10/10

Malware Config

Extracted

Family

meduza

C2

193.3.19.151

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    mrfree

  • extensions

    .txt

  • grabber_max_size

    4.194304e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • markiz.exe
    .exe windows:6 windows x64 arch:x64

    0095cfee1cdfcef936c4c086b6b4fe85


    Headers

    Imports

    Sections