Overview

overview

10

Static

static

10

552-0-0x00...ry.exe

windows7-x64

552-0-0x00...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    552-0-0x0000000001F80000-0x00000000020C1000-memory.dmp

  • Size

    1.3MB

  • MD5

    ac0b808c5897e7d377330b6d684edad3

  • SHA1

    9148b2f6c93fefa606a8dcc8ef0f9fc3ed2180b7

  • SHA256

    c12b60cd933d03e1d3648b2ee38c5bae76ab4ccc4572835c0b08363106c72803

  • SHA512

    4a33aed76ce22438de605e2ac532728d892235814b75efeb61f6604d300e902f1bab4ff30b184623efa67e89172a770e3e034f5b8dc8e22b02d87cadf0e26e66

  • SSDEEP

    24576:c8wnXXnncHLI8JQpP0s9MjemJ5lx1w60h0lhSMXlrmTOd:JMXXncHLIJss+egDx+657mTa

Score
10/10
meduza

Malware Config

Extracted

Family

meduza

C2

193.3.19.151

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    hellres

  • extensions

    .txt; .doc; .xlsx

  • grabber_max_size

    4.194304e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
    meduza
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 552-0-0x0000000001F80000-0x00000000020C1000-memory.dmp
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections