General

  • Target

    2024-04-21_f9938aa20eceaf002669be3272f8e998_floxif_magniber_revil

  • Size

    37.4MB

  • MD5

    f9938aa20eceaf002669be3272f8e998

  • SHA1

    fa5841f7138612a7f43327ce16654bb3800b7364

  • SHA256

    dc7746cb46ec9a53c52c1544847d19e13cbbc9071b05ea26e796caeb1dc841a9

  • SHA512

    c806af05a44b7e55aa51aad89f1d0c888f6bc2841ff6f412acf8340cb0d10c64fe5e05f655d55c6ca218fd6821570627136d083d39a539262456d5f80a64d8b1

  • SSDEEP

    393216:aRlOkxjdjXraM47N6EfZnWcUeDQJBjWmAFuHrAFLVpsnPmVlrqNAw+AufvlyhSpn:I02j9XE7YcxOBjWDLjPZw+AuFys7Gxq3

Score
10/10

Malware Config

Signatures

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-21_f9938aa20eceaf002669be3272f8e998_floxif_magniber_revil
    .exe windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections