Overview

overview

10

Static

static

10

208afccc12...1a.exe

windows7-x64

10

208afccc12...1a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    208afccc1297879ecafd8cc97589c65d5463abb1710c43e81c8df08a4ac8d61a.exe

  • Size

    2.0MB

  • MD5

    74609d22f478a3df31034c9f29892da3

  • SHA1

    d9256eaf50802e49114540f9ee7a7306173c9db8

  • SHA256

    208afccc1297879ecafd8cc97589c65d5463abb1710c43e81c8df08a4ac8d61a

  • SHA512

    30f3a93f68a2d4e8a8ba0cb3a90abe174860dbd1dc01f42fdd6708f46b94e1394ba0803b1e1478cbcd887e4d09ca15da1706d31fe6227b75cb06cb3b72d464cb

  • SSDEEP

    49152:kqKuOKE3tn7J8ZsN0zZQQI0qnX9eztpls0uNee:k3nX4lnuF

Score
10/10
meduza

Malware Config

Extracted

Family

meduza

C2

62.60.226.62

Attributes
  • anti_dbg

    true

  • anti_vm

    true

  • build_name

    @bebanrti

  • extensions

    .txt;.doc;.docx;.pdf;.xls;.xlsx;.log;.db;.sqlite

  • grabber_max_size

    2.097152e+06

  • port

    15666

  • self_destruct

    false

Signatures

  • Meduza Stealer payload 1 IoCs
  • Meduza family
    meduza
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 208afccc1297879ecafd8cc97589c65d5463abb1710c43e81c8df08a4ac8d61a.exe
    .exe windows:6 windows x64 arch:x64

    d18aa68269a30cd13693bec0b3505c6a


    Headers

    Imports

    Sections