General

  • Target

    2024-04-28_702d1e80fd1efcdb1e0e11fb1c725a82_floxif_gozi_magniber_revil

  • Size

    37.3MB

  • MD5

    702d1e80fd1efcdb1e0e11fb1c725a82

  • SHA1

    5c61777d19d3aa25736fd462ba0f5f703b3dfa63

  • SHA256

    838300bf6236d7eaf62f102856064bf7984314cf148806ee41129fe5f6b810f7

  • SHA512

    42989dbf0c4188482186694196547995c1529c72f5b5d22a68fe4dc8834e68ba7a5837c2d2dc12ef52417027791dd0d7d8a479219486363af98fcff73826142b

  • SSDEEP

    786432:1vOyjvrFhNDLYKkDjSONprtw+AuIUs7GU3u:12yjvrFhNDLYdjSwprtOuIUsKZ

Score
10/10

Malware Config

Signatures

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs

Files

  • 2024-04-28_702d1e80fd1efcdb1e0e11fb1c725a82_floxif_gozi_magniber_revil
    .exe windows:6 windows x86 arch:x86

    061510ed4c1451ea3f5e191a038be094


    Code Sign

    Headers

    Imports

    Exports

    Sections