Overview

overview

7

Static

static

3

2024-04-24...xz.exe

windows7-x64

7

2024-04-24...xz.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-24_6d7b3f63550b6bd7b39ebee21cb15ef7_magniber_revil_zxxz

  • Size

    24.3MB

  • Sample

    240424-pjqe7ahg68

  • MD5

    6d7b3f63550b6bd7b39ebee21cb15ef7

  • SHA1

    8250d96cb2808118eadc6baae9a89e1193a4c863

  • SHA256

    07900d5f2d0849447e2aa7eb2b167c5b84b14911c71445b8208a66b4b142c033

  • SHA512

    72561b92f9d01358b68a77136e2bdf2ef94a2207e9b4eb7b45c9f437b612226b7a6eb4a7620bce97e6c12c8afaa17c26af7c44929f8e2bf7c378809e5b570bc5

  • SSDEEP

    196608:RP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1OpZH2SAmGcWqnlv018:RPboGX8a/jWWu3cy2D/cWcls1

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-24_6d7b3f63550b6bd7b39ebee21cb15ef7_magniber_revil_zxxz

    • Size

      24.3MB

    • MD5

      6d7b3f63550b6bd7b39ebee21cb15ef7

    • SHA1

      8250d96cb2808118eadc6baae9a89e1193a4c863

    • SHA256

      07900d5f2d0849447e2aa7eb2b167c5b84b14911c71445b8208a66b4b142c033

    • SHA512

      72561b92f9d01358b68a77136e2bdf2ef94a2207e9b4eb7b45c9f437b612226b7a6eb4a7620bce97e6c12c8afaa17c26af7c44929f8e2bf7c378809e5b570bc5

    • SSDEEP

      196608:RP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1OpZH2SAmGcWqnlv018:RPboGX8a/jWWu3cy2D/cWcls1

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks