Overview

overview

7

Static

static

3

2024-04-24...xz.exe

windows7-x64

7

2024-04-24...xz.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-24_2a8990659fd591fcbfd9fb23ea9ac3f9_magniber_revil_zxxz

  • Size

    24.3MB

  • Sample

    240424-n6rfbshf3v

  • MD5

    2a8990659fd591fcbfd9fb23ea9ac3f9

  • SHA1

    aa95c4bbb10039828a68c362d227a28af5ffebc7

  • SHA256

    6598e9a6982d7939e146616d6e22777698c385e0727dc6a3ed67ebc8b98e27a0

  • SHA512

    06875073141d504a6a8f0dd42462306980b3e7dde8325983b6919d3a95ca4ad4c95a1d519efdfc99bef5c6e5a4d03b2a651d36709016cbf13f319fc552f8c915

  • SSDEEP

    196608:9P0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018OIm:9PboGX8a/jWWu3cI2D/cWcls1e

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-24_2a8990659fd591fcbfd9fb23ea9ac3f9_magniber_revil_zxxz

    • Size

      24.3MB

    • MD5

      2a8990659fd591fcbfd9fb23ea9ac3f9

    • SHA1

      aa95c4bbb10039828a68c362d227a28af5ffebc7

    • SHA256

      6598e9a6982d7939e146616d6e22777698c385e0727dc6a3ed67ebc8b98e27a0

    • SHA512

      06875073141d504a6a8f0dd42462306980b3e7dde8325983b6919d3a95ca4ad4c95a1d519efdfc99bef5c6e5a4d03b2a651d36709016cbf13f319fc552f8c915

    • SSDEEP

      196608:9P0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018OIm:9PboGX8a/jWWu3cI2D/cWcls1e

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks