Overview

overview

10

Static

static

10

guksefsfwad.exe

windows7-x64

7

guksefsfwad.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    guksefsfwad.exe

  • Size

    1.2MB

  • Sample

    241227-tp87psxkfn

  • MD5

    42819f664dd1874ccc1f83d39ecb01d7

  • SHA1

    c067fc11c5a03c4d179848ebe065bef670e3b501

  • SHA256

    86612cbb8895f4b594dd10bcf8d10840703f429c8bde73bd99a99d9ded8ef2cf

  • SHA512

    3d2085c2be5d3291d9a2a09294fcb485e1acbcfb4314b4d3a7cc103420fc126544bf25f0a364a1bbe91b521a8ad3aa17c54cfd3f9e8c11d6c61b4e20fde71a98

  • SSDEEP

    24576:28wnXXnncHLI8JQpR0s9MjemJ5lx1w6Qh0lhSMXl5uCTOd:DMXXncHLIJ+s+egDx+6lpVTa

Score
10/10
meduza

Malware Config

Extracted

Family

meduza

C2

193.124.203.119

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    medu

  • extensions

    .txt; .doc; .xlsx

  • grabber_max_size

    4.194304e+06

  • port

    15666

  • self_destruct

    false

Targets

    • Target

      guksefsfwad.exe

    • Size

      1.2MB

    • MD5

      42819f664dd1874ccc1f83d39ecb01d7

    • SHA1

      c067fc11c5a03c4d179848ebe065bef670e3b501

    • SHA256

      86612cbb8895f4b594dd10bcf8d10840703f429c8bde73bd99a99d9ded8ef2cf

    • SHA512

      3d2085c2be5d3291d9a2a09294fcb485e1acbcfb4314b4d3a7cc103420fc126544bf25f0a364a1bbe91b521a8ad3aa17c54cfd3f9e8c11d6c61b4e20fde71a98

    • SSDEEP

      24576:28wnXXnncHLI8JQpR0s9MjemJ5lx1w6Qh0lhSMXl5uCTOd:DMXXncHLIJ+s+egDx+6lpVTa

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks