General

  • Target

    2024-05-09_1fa077cf7bf427a88a79f47d6a74b6f8_magniber_revil_zxxz

  • Size

    24.3MB

  • Sample

    240509-mjnkgsda3t

  • MD5

    1fa077cf7bf427a88a79f47d6a74b6f8

  • SHA1

    1c0bd164c42e6468a0c6de726a82d8e63663e2ad

  • SHA256

    2a795377aa55e406ff0c75e7a5ca4c011b7f00539ea975b10a2fb55a63033f71

  • SHA512

    7353537142df64e71491c0902be8c08b41f05f249385c9728062252811430c406ba6f4fc88a0bde36bef88fcb58d26a34ac3a98e1f4e05d3342cb4711242e6fe

  • SSDEEP

    196608:FP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018mb0:FPboGX8a/jWWu3cI2D/cWcls15g

Malware Config

Targets

    • Target

      2024-05-09_1fa077cf7bf427a88a79f47d6a74b6f8_magniber_revil_zxxz

    • Size

      24.3MB

    • MD5

      1fa077cf7bf427a88a79f47d6a74b6f8

    • SHA1

      1c0bd164c42e6468a0c6de726a82d8e63663e2ad

    • SHA256

      2a795377aa55e406ff0c75e7a5ca4c011b7f00539ea975b10a2fb55a63033f71

    • SHA512

      7353537142df64e71491c0902be8c08b41f05f249385c9728062252811430c406ba6f4fc88a0bde36bef88fcb58d26a34ac3a98e1f4e05d3342cb4711242e6fe

    • SSDEEP

      196608:FP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018mb0:FPboGX8a/jWWu3cI2D/cWcls15g

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks