General

  • Target

    2024-05-09_c82dd65e90e076d0f1a022b49a71db1a_magniber_revil_zxxz

  • Size

    24.3MB

  • Sample

    240509-r8c79sac96

  • MD5

    c82dd65e90e076d0f1a022b49a71db1a

  • SHA1

    84a10500ae9c06c8822e3f26f2cb3761982faa4a

  • SHA256

    7eccf7c7b96502329cd36e6af213a47f67e27b4213768af0206e8daa6edbb89d

  • SHA512

    b55ed5eded06422b4b0034e022695cf5d44dfa10fb02ba1e3cc986aa2712288f02d452631382a6438c9ad2aaa186ed4a0bdada196592395179e72219a588dfb4

  • SSDEEP

    196608:iP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018bHBVH:iPboGX8a/jWWu3cI2D/cWcls16H

Malware Config

Targets

    • Target

      2024-05-09_c82dd65e90e076d0f1a022b49a71db1a_magniber_revil_zxxz

    • Size

      24.3MB

    • MD5

      c82dd65e90e076d0f1a022b49a71db1a

    • SHA1

      84a10500ae9c06c8822e3f26f2cb3761982faa4a

    • SHA256

      7eccf7c7b96502329cd36e6af213a47f67e27b4213768af0206e8daa6edbb89d

    • SHA512

      b55ed5eded06422b4b0034e022695cf5d44dfa10fb02ba1e3cc986aa2712288f02d452631382a6438c9ad2aaa186ed4a0bdada196592395179e72219a588dfb4

    • SSDEEP

      196608:iP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018bHBVH:iPboGX8a/jWWu3cI2D/cWcls16H

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks