General

  • Target

    2024-05-21_112f02a8005145bdf72257147177caed_magniber_revil_zxxz

  • Size

    24.3MB

  • Sample

    240521-tynx5abg8v

  • MD5

    112f02a8005145bdf72257147177caed

  • SHA1

    0fdada6d819d3c0affe6d8910de1ac735194a1ec

  • SHA256

    9c05409567b6b94812f8cd1e64e01487e83b657dd9cb62182ceff0746268cb8d

  • SHA512

    9793db9f81c27cbe0cc408908c3877c50ac38843838f94f814bd9495b2f232f098b7c6e56abaee058f212a7425ee9c20aa7cd897a82909fcd478d15bd5b3b247

  • SSDEEP

    196608:cP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op1H2SAmGcWqnlv0180aGM5B:cPboGX8a/jWWu3cq2D/cWcls1paX5

Score
7/10

Malware Config

Targets

    • Target

      2024-05-21_112f02a8005145bdf72257147177caed_magniber_revil_zxxz

    • Size

      24.3MB

    • MD5

      112f02a8005145bdf72257147177caed

    • SHA1

      0fdada6d819d3c0affe6d8910de1ac735194a1ec

    • SHA256

      9c05409567b6b94812f8cd1e64e01487e83b657dd9cb62182ceff0746268cb8d

    • SHA512

      9793db9f81c27cbe0cc408908c3877c50ac38843838f94f814bd9495b2f232f098b7c6e56abaee058f212a7425ee9c20aa7cd897a82909fcd478d15bd5b3b247

    • SSDEEP

      196608:cP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op1H2SAmGcWqnlv0180aGM5B:cPboGX8a/jWWu3cq2D/cWcls1paX5

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks