General

  • Target

    2024-05-24_8b3900e6ff8773bff0c6107487e79622_magniber_revil_zxxz

  • Size

    24.3MB

  • Sample

    240524-xrmchaff7x

  • MD5

    8b3900e6ff8773bff0c6107487e79622

  • SHA1

    12c7a9c99ad224f84c1fa242fa938e7e10988665

  • SHA256

    1b3ec89dbc0409378043c0165c2e4b307ce0ed7c6b99713e9032a541e9078038

  • SHA512

    f9084baac788959638ca5d51276dac54c1cf4d63aef678754b27f289ddb206c47427e751c01a4c70d6eced82151f76f69fdd1c693dc989c53ed1c866c580d1fc

  • SSDEEP

    196608:kP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1OpqH2SAmGcWqnlv018DS3:kPboGX8a/jWWu3cx2D/cWcls10Y

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_8b3900e6ff8773bff0c6107487e79622_magniber_revil_zxxz

    • Size

      24.3MB

    • MD5

      8b3900e6ff8773bff0c6107487e79622

    • SHA1

      12c7a9c99ad224f84c1fa242fa938e7e10988665

    • SHA256

      1b3ec89dbc0409378043c0165c2e4b307ce0ed7c6b99713e9032a541e9078038

    • SHA512

      f9084baac788959638ca5d51276dac54c1cf4d63aef678754b27f289ddb206c47427e751c01a4c70d6eced82151f76f69fdd1c693dc989c53ed1c866c580d1fc

    • SSDEEP

      196608:kP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1OpqH2SAmGcWqnlv018DS3:kPboGX8a/jWWu3cx2D/cWcls10Y

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks