Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
14 IOCs

Meduza Stealer or The Return of The Infamous Aurora Stealer

RussianPanda
RussianPanda
Published June 28, 2023Original Report

Threat Actors

Malware Families

Excerpt

Meduza’s Gaze Meduza Stealer … Yes, you read it right, I did not misspelled it, is a new stealer that appeared on Russian-speaking forums at the beginning of June 2023. The stealer is written in C++ and is approximately 600KB in size. The DLL dependencies are statically linked to the binary, which reduces the detection. It’s also worth noting that the collected logs are not stored on the disk. The stealer collects the data from 100 browsers which includes Chromium and Gecko…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYSandwormINFRASTRUCTUREhttp://89.185.85.245CAPABILITYAuroraMETA StealerMedusaVICTIMunknown
Adversary(1)
Infrastructure(1)
Capability(4)
Victim

Indicators of Compromise

Open the mindmap →

14 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA256ddf3604bdfa1e5542cfee4d06a4118214a23f1a65364f44e53e0b68cbfc588eaMediumScore 53/100First seen
SHA256cbc07d45dd4967571f86ae75b120b620b701da11c4ebfa9afcae3a0220527972MediumScore 53/100First seen
MD5add6ae21d25ffe8d312dd10ba98df778MediumScore 53/100First seen
SHA256a73e95fb7ba212f74e0116551ccba73dd2ccba87d8927af29499bba9b3287ea7MediumScore 53/100First seen
URLhttp://89.185.85.245HighScore 58/100First seen
SHA25629cf1ba279615a9f4c31d6441dd7c93f5b8a7d95f735c0daa3cc4dbb799f66d4MediumScore 53/100First seen
SHA256702abb15d988bba6155dd440f615bbfab9f3c0ed662fc3e64ab1289a1098af98MediumScore 53/100First seen
SHA2561c70f987a0839d11826f053ae90e81a277fa154f5358303fe9a511dbe8b529f2MediumScore 53/100First seen
SHA256afbf62a466552392a4b2c0aa8c51bf3bde84afbe5aa84a2483dc92e906421d0aMediumScore 53/100First seen
SHA256f0c730ae57d07440a0de0889db93705c1724f8c3c628ee16a250240cc4f91858MediumScore 53/100First seen
SHA25691efe60eb46d284c3cfcb584d93bc5b105bf9b376bee761c504598d064b918d4MediumScore 53/100First seen
SHA2562ad84bfff7d5257fdeb81b4b52b8e0115f26e8e0cdaa014f9e3084f518aa6149MediumScore 53/100First seen
SHA2566d8ed1dfcb2d8a9e3c2d51fa106b70a685cbd85569ffabb5692100be75014803MediumScore 53/100First seen
SHA256f575eb5246b5c6b9044ea04610528c040c982904a5fb3dc1909ce2f0ec15c9efMediumScore 53/100First seen

IOC Relationship Graph

Building graph…