General

  • Target

    2024-04-26_cb70a7e89839541d6fe3b4000e61f085_magniber_revil

  • Size

    18.4MB

  • MD5

    cb70a7e89839541d6fe3b4000e61f085

  • SHA1

    cf79410e875829987de539d11ddf7e8b867fc575

  • SHA256

    6e48c5891ce46f2af82a82ee7babe97a5c8662c4f573342fc64e035a976183ab

  • SHA512

    03b71fde04678c3ceb685b546ccab731896aeaf104fd4883dc15b338a02c7bc3bead089048515fe70f8d5722b1679cba79e01ce3d24997f4e81a24a75fdf6dbf

  • SSDEEP

    196608:rGDZ9hB+JsVSeYmvvsqirsYmDwwzuhK+IAsrZSurqN+ElcA9ORd3Myf25mZ:+Z9vjVXPsqPtz3jdSurqNjG3ff

Score
10/10

Malware Config

Signatures

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-26_cb70a7e89839541d6fe3b4000e61f085_magniber_revil
    .exe windows:5 windows x86 arch:x86

    292c64029d423bccb2d2d3ced6c81343


    Headers

    Imports

    Exports

    Sections