General

  • Target

    2024-04-21_894c027891e2a4beabf0019d1bf7f014_magniber_revil

  • Size

    37.3MB

  • MD5

    894c027891e2a4beabf0019d1bf7f014

  • SHA1

    64fabb11cc131a6eded78221b3e6df17a9d5b2ff

  • SHA256

    849046bc8b480fe796fe1c485c646b6deff1e3188ed701f5635f85d7de5ea750

  • SHA512

    0fb1f2d7aa6f54231a6ccc5401b2107eac5aca994e3cc97cc74dcc928125c1d8a75c4cf06d6e0e1c721abb8b9955cdde5c756001902a0784342062f1fe6778d5

  • SSDEEP

    393216:l4sOkxjdjXrac47N6EfZnWcUeDQJBvWmAFuHrAFLVpsnWzVlrqNrf+/nC2qjUUpc:2p2j9XE7YcxOBvWDLjxg+Z4XSvB1+2qM

Score
10/10

Malware Config

Signatures

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-21_894c027891e2a4beabf0019d1bf7f014_magniber_revil
    .exe windows:6 windows x86 arch:x86

    9381e5c599e91d84bb79f422192efbef


    Headers

    Imports

    Exports

    Sections