Extracted

• • Target

    Kraken Cheat.rar

  • Size

    10.6MB

  • MD5

    444fdd75524fa8456d8c6aceab7bcf27

  • SHA1

    24e7184b7e38106803739ca141de1738c6910f5d

  • SHA256

    d78d8879a87115794cab50ea760af9b769f77bd21789be9d7ff920742302edf6

  • SHA512

    2361c25d42a4ee1d376e89d3b04dcd7437b456455ab6c44c321fafbef5d7368d33cf5dabdbd00610bdf41bbca2b7e9a816d02e3c8f9bd403df66e2bf55c6e240

  • SSDEEP

    196608:RbmOKzBSBkDX6+UCcqWEeRf8+STSu+ioBPYSTPhYZzkoDEWMXqgI9dcx/zM:Rbl+BSBkT6+UCeAw9OS9YZAouO+zM

  Score

  10^/10

  meduza444collectiondiscoverystealer

  • Meduza

    Meduza is a crypto wallet and info stealer written in C++.

    stealermeduza

  • Meduza Stealer payload

  • Meduza family

    meduza

  • Executes dropped EXE

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1