Overview

overview

10

Static

static

10

2024-05-09...xz.exe

windows7-x64

10

2024-05-09...xz.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-09_1b90856b141896a464214b5002a4db43_magniber_revil_zxxz

  • Size

    24.3MB

  • Sample

    240509-cw8fbade2w

  • MD5

    1b90856b141896a464214b5002a4db43

  • SHA1

    9d18c05c9d3b3d16bbeb6d919bf9e3bec1ee485d

  • SHA256

    d93a72cbb21b04b47f26278eecb7c36b488a2907d34e797b94bafe37141b9aa9

  • SHA512

    6406ade0bf34994eb7eef6ede130a61a8cfb6172b4ad2d80e1c3a0eb0a5854334aad9e55928993690dbf312fdd0cc794dc2b6044d77218a603ec0e6f5bd56a33

  • SSDEEP

    196608:pP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018h8:pPboGX8a/jWWu3cI2D/cWcls1

Score
10/10
privateloaderloaderspywarestealer

Malware Config

Targets

    • Target

      2024-05-09_1b90856b141896a464214b5002a4db43_magniber_revil_zxxz

    • Size

      24.3MB

    • MD5

      1b90856b141896a464214b5002a4db43

    • SHA1

      9d18c05c9d3b3d16bbeb6d919bf9e3bec1ee485d

    • SHA256

      d93a72cbb21b04b47f26278eecb7c36b488a2907d34e797b94bafe37141b9aa9

    • SHA512

      6406ade0bf34994eb7eef6ede130a61a8cfb6172b4ad2d80e1c3a0eb0a5854334aad9e55928993690dbf312fdd0cc794dc2b6044d77218a603ec0e6f5bd56a33

    • SSDEEP

      196608:pP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018h8:pPboGX8a/jWWu3cI2D/cWcls1

    Score
    10/10
    privateloaderloaderspywarestealer

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

      loaderprivateloader

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks