Overview

overview

10

Static

static

10

guksefsfwad.exe

windows7-x64

7

guksefsfwad.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    guksefsfwad.exe

  • Size

    1.2MB

  • MD5

    42819f664dd1874ccc1f83d39ecb01d7

  • SHA1

    c067fc11c5a03c4d179848ebe065bef670e3b501

  • SHA256

    86612cbb8895f4b594dd10bcf8d10840703f429c8bde73bd99a99d9ded8ef2cf

  • SHA512

    3d2085c2be5d3291d9a2a09294fcb485e1acbcfb4314b4d3a7cc103420fc126544bf25f0a364a1bbe91b521a8ad3aa17c54cfd3f9e8c11d6c61b4e20fde71a98

  • SSDEEP

    24576:28wnXXnncHLI8JQpR0s9MjemJ5lx1w6Qh0lhSMXl5uCTOd:DMXXncHLIJ+s+egDx+6lpVTa

Score
10/10
meduza

Malware Config

Extracted

Family

meduza

C2

193.124.203.119

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    medu

  • extensions

    .txt; .doc; .xlsx

  • grabber_max_size

    4.194304e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
    meduza
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • guksefsfwad.exe
    .exe windows:6 windows x64 arch:x64

    0095cfee1cdfcef936c4c086b6b4fe85


    Headers

    Imports

    Sections