General
-
Target
2024-01-10_cebd26fccb76f04528afeec589ba8512_magniber_revil
-
Size
5.3MB
-
Sample
240111-gngpvaaabm
-
MD5
cebd26fccb76f04528afeec589ba8512
-
SHA1
106ccbfa5fdc4d2417a3ca0510bb0ed722d929ef
-
SHA256
1927a303087e2ad06db926cadf7ff219b4e40ac765d63f1b454dd34e45cd1863
-
SHA512
1c4eac906c96cf59ee42596377a7d7cbd3a64bf77f2a357283c544fc6aced9396dacaa552c4f8ea886bf9a0c5b709f907b949e0ace4e393e42c6fdee023b0bd6
-
SSDEEP
98304:F9Ns5TDi1FXQct/iAj185SHiX3vks8Uu50GPxluKMWRhjmAJf/Fs7Yi1:FgTDi1FXQct/iAj185SCX850ixFRhjXU
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-10_cebd26fccb76f04528afeec589ba8512_magniber_revil.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-10_cebd26fccb76f04528afeec589ba8512_magniber_revil.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-10_cebd26fccb76f04528afeec589ba8512_magniber_revil
-
Size
5.3MB
-
MD5
cebd26fccb76f04528afeec589ba8512
-
SHA1
106ccbfa5fdc4d2417a3ca0510bb0ed722d929ef
-
SHA256
1927a303087e2ad06db926cadf7ff219b4e40ac765d63f1b454dd34e45cd1863
-
SHA512
1c4eac906c96cf59ee42596377a7d7cbd3a64bf77f2a357283c544fc6aced9396dacaa552c4f8ea886bf9a0c5b709f907b949e0ace4e393e42c6fdee023b0bd6
-
SSDEEP
98304:F9Ns5TDi1FXQct/iAj185SHiX3vks8Uu50GPxluKMWRhjmAJf/Fs7Yi1:FgTDi1FXQct/iAj185SCX850ixFRhjXU
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-