General

  • Target
    2024-05-09_917936fec53cf86697afb10f74128d87_magniber_revil_zxxz
  • Size 24.3MB
  • Sample240509-2t9m2aef55
  • SHA256 5b1c3d41c1b5301507b30120828d71b35988e45622554e4bedac4c1ff1a00e8f
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Privateloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2024-05-09_917936fec53cf86697afb10f74128d87_magniber_revil_zxxz
    .exe 24.3MB

2024-05-09_917936fec53cf86697afb10f74128d87_magniber_revil_zxxz

  • IMPHASH c463553007d2516c9c89e43f7362a1a0
  • SHA256 5b1c3d41c1b5301507b30120828d71b35988e45622554e4bedac4c1ff1a00e8f
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
12675601
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\ws\out\Release\node.pdb