General

  • Target

    2024-01-21_2ad30a2bd8007de5eb607217370f3e4a_floxif_magniber_revil

  • Size

    35.8MB

  • MD5

    2ad30a2bd8007de5eb607217370f3e4a

  • SHA1

    c1a35401ddb07b32357cf1328e7082d4f45b7aea

  • SHA256

    25336e7133baaa37353f4166fe0032ddc29694f2eb9b5ae2c3a2c56c0043107e

  • SHA512

    fa9478f1d96445688bb4cccb58925b133a8829e00280cecdd83ae78e446884b52ed4e22eed0016cc9c20c43768e6414fcf721bea02fd2f24605aa3627319b78f

  • SSDEEP

    393216:VC3aysP+F1gBJ3gDjHbSaiAFStsZTBuSgCh9h8hAqsPZ/U0qvpWerqNNZifRlch3:Y3aa6BOLiATZgC2hAfZifcs7gl

Score
10/10

Malware Config

Signatures

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-21_2ad30a2bd8007de5eb607217370f3e4a_floxif_magniber_revil
    .exe windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections