General

  • Target

    2024-05-03_524ef7b66a0f9d22f5614344344910b3_floxif_gozi_magniber_revil

  • Size

    37.4MB

  • MD5

    524ef7b66a0f9d22f5614344344910b3

  • SHA1

    0ea7a33d5d7319474a9b0275e3320ca756ce97c1

  • SHA256

    ea2862bdc1619c6f9b34c046b2f525c9f9a688894a668cb0cfbdf04550544f10

  • SHA512

    3f0ef0755407e3f3c9e39dd38d6871258291e8739a72b823223e5c0d45aab29af0c6b3f7bee42698e4ffdd21be645d88f25f587fe1886bd158bf4ef0b0f9dab0

  • SSDEEP

    393216:aRglkxjdjXrac47N6EfZnWcUeDQJBjWmAFuHrAFLVpsnPmVlrqNAw+AufvlyhSpD:IG2j9XE7YcxOBjWDLjPZw+AuFys7Gxqz

Score
10/10

Malware Config

Signatures

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Privateloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-03_524ef7b66a0f9d22f5614344344910b3_floxif_gozi_magniber_revil
    .exe windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections