Overview

overview

7

Static

static

3

2024-05-24...xz.exe

windows7-x64

7

2024-05-24...xz.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-24_f7df312c46e9e1cf941e93703271c91e_magniber_revil_zxxz

  • Size

    24.3MB

  • Sample

    240524-rt6w2ahe46

  • MD5

    f7df312c46e9e1cf941e93703271c91e

  • SHA1

    af8e8f033ea2a51335583dc3368559eb0385e76f

  • SHA256

    be9bc290debeaf1abb77f9996300ab5060f1555a142d3603e7ea1c032568d939

  • SHA512

    027ed1af9aa51af9e10415f719df409e7ad8ddca6ca3e47dafbef3d4dbe2783a48cf033a2b5a382a9a3112c82abf669cf8baa7b3e8d254f2c1cae3dd5a52677c

  • SSDEEP

    196608:mP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018B8:mPboGX8a/jWWu3cI2D/cWcls1

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-05-24_f7df312c46e9e1cf941e93703271c91e_magniber_revil_zxxz

    • Size

      24.3MB

    • MD5

      f7df312c46e9e1cf941e93703271c91e

    • SHA1

      af8e8f033ea2a51335583dc3368559eb0385e76f

    • SHA256

      be9bc290debeaf1abb77f9996300ab5060f1555a142d3603e7ea1c032568d939

    • SHA512

      027ed1af9aa51af9e10415f719df409e7ad8ddca6ca3e47dafbef3d4dbe2783a48cf033a2b5a382a9a3112c82abf669cf8baa7b3e8d254f2c1cae3dd5a52677c

    • SSDEEP

      196608:mP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018B8:mPboGX8a/jWWu3cI2D/cWcls1

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks