Overview

overview

10

Static

static

10

2024-05-01...xz.exe

windows7-x64

10

2024-05-01...xz.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-01_43dd8a85b202c8d3f1f0f8529542560f_magniber_revil_zxxz

  • Size

    24.3MB

  • Sample

    240501-my145afd58

  • MD5

    43dd8a85b202c8d3f1f0f8529542560f

  • SHA1

    14898b2ab5b4d9aa1532ed13e7c4b8ac358da18f

  • SHA256

    06cc9a17eafbacd08aefcdf03ecf2b3fa8b7e927245ab967e7f3cc91a91b87f7

  • SHA512

    42599ce09220bb91969c0fe71fee8f20568d21f62317a074f7750c37ad16e2028f6ff1a597e1886a01f0e2f2759f0ecf5ab6cb4e1ba1dc9cdca9839b9c13570b

  • SSDEEP

    196608:YP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018c17:YPboGX8a/jWWu3cI2D/cWcls1j

Score
10/10
privateloaderloaderspywarestealer

Malware Config

Targets

    • Target

      2024-05-01_43dd8a85b202c8d3f1f0f8529542560f_magniber_revil_zxxz

    • Size

      24.3MB

    • MD5

      43dd8a85b202c8d3f1f0f8529542560f

    • SHA1

      14898b2ab5b4d9aa1532ed13e7c4b8ac358da18f

    • SHA256

      06cc9a17eafbacd08aefcdf03ecf2b3fa8b7e927245ab967e7f3cc91a91b87f7

    • SHA512

      42599ce09220bb91969c0fe71fee8f20568d21f62317a074f7750c37ad16e2028f6ff1a597e1886a01f0e2f2759f0ecf5ab6cb4e1ba1dc9cdca9839b9c13570b

    • SSDEEP

      196608:YP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018c17:YPboGX8a/jWWu3cI2D/cWcls1j

    Score
    10/10
    privateloaderloaderspywarestealer

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

      loaderprivateloader

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks