Overview

overview

7

Static

static

3

2024-05-30...xz.exe

windows7-x64

7

2024-05-30...xz.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-30_07e5561fc1cfc92422b464dc0817face_magniber_revil_zxxz

  • Size

    24.3MB

  • Sample

    240530-nhzf2afe8y

  • MD5

    07e5561fc1cfc92422b464dc0817face

  • SHA1

    6199fe80f7edb6d032e0d6b76ae034cacc75714b

  • SHA256

    f91ef63d3fdaf33dd81fd6a41e41b7750ec152ae7f27b47a07f21d593c6006b0

  • SHA512

    e9ca50e9d31893be942e5430a37f5e1f59503ff7cc8f090efe346dfb6c8af7615adcf623c5a8013e3347d67ebef61b0ec0f330155607eed60088166fa09654bc

  • SSDEEP

    196608:rP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018aUoiPBx:rPboGX8a/jWWu3cI2D/cWcls1r

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-05-30_07e5561fc1cfc92422b464dc0817face_magniber_revil_zxxz

    • Size

      24.3MB

    • MD5

      07e5561fc1cfc92422b464dc0817face

    • SHA1

      6199fe80f7edb6d032e0d6b76ae034cacc75714b

    • SHA256

      f91ef63d3fdaf33dd81fd6a41e41b7750ec152ae7f27b47a07f21d593c6006b0

    • SHA512

      e9ca50e9d31893be942e5430a37f5e1f59503ff7cc8f090efe346dfb6c8af7615adcf623c5a8013e3347d67ebef61b0ec0f330155607eed60088166fa09654bc

    • SSDEEP

      196608:rP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv018aUoiPBx:rPboGX8a/jWWu3cI2D/cWcls1r

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks