General

  • Target

    2024-05-09_f963322aa4c09aaecea8cf400c2f0a6a_magniber_revil_zxxz

  • Size

    24.3MB

  • Sample

    240509-xr2gesdb93

  • MD5

    f963322aa4c09aaecea8cf400c2f0a6a

  • SHA1

    4559638a8ad753d8d1607809d3e7820ecf4f1606

  • SHA256

    9fb09fdea96302deeccde5d56ee3d59b83f6ccbb0eee785148919776a32a6193

  • SHA512

    8b79ebc106f620c664faf86d6383ce342be8e879dbd1f144e2bd9cb586cf0efa9f5dde0dd0b46406d490ae374421507ce20c181eafa1976565c154d8cb2aeb96

  • SSDEEP

    196608:9P0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018d:9PboGX8a/jWWu3cI2D/cWcls1

Malware Config

Targets

    • Target

      2024-05-09_f963322aa4c09aaecea8cf400c2f0a6a_magniber_revil_zxxz

    • Size

      24.3MB

    • MD5

      f963322aa4c09aaecea8cf400c2f0a6a

    • SHA1

      4559638a8ad753d8d1607809d3e7820ecf4f1606

    • SHA256

      9fb09fdea96302deeccde5d56ee3d59b83f6ccbb0eee785148919776a32a6193

    • SHA512

      8b79ebc106f620c664faf86d6383ce342be8e879dbd1f144e2bd9cb586cf0efa9f5dde0dd0b46406d490ae374421507ce20c181eafa1976565c154d8cb2aeb96

    • SSDEEP

      196608:9P0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018d:9PboGX8a/jWWu3cI2D/cWcls1

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks