04051ffaf3810a46d0a20d3813725f388fbc68c7d9dbee664844274c482666b8 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-05-31...xz.exe

windows7-x64

7

2024-05-31...xz.exe

windows10-2004-x64

7

Sharing

General

Target

2024-05-31_169a0fda24fc60eb1933694b4e31bd1c_magniber_revil_zxxz
Size

24.3MB
Sample

240531-swljjsce7t
MD5

169a0fda24fc60eb1933694b4e31bd1c
SHA1

77e143ff1c37a7667e5282499ee04f077dd9255e
SHA256

04051ffaf3810a46d0a20d3813725f388fbc68c7d9dbee664844274c482666b8
SHA512

1d16569caeb27db1f9b1d6b4dc8c19dbe2ea98049c15bc29701c4a2b97a2f15f9fc012068124d0f8285f2df2a1856beef9bad1007f216c20cfdd17eca0d04317
SSDEEP

196608:XP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv0189UoiPBx:XPboGX8a/jWWu3cI2D/cWcls1g

Score

7^/10

spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2024-05-31_169a0fda24fc60eb1933694b4e31bd1c_magniber_revil_zxxz.exe

Resource

win7-20240419-en

spyware stealer

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral2

Sample

2024-05-31_169a0fda24fc60eb1933694b4e31bd1c_magniber_revil_zxxz.exe

Resource

win10v2004-20240426-en

spyware stealer

windows10-2004-x64

14 signatures

150 seconds

Malware Config

Targets

- Target
  
  2024-05-31_169a0fda24fc60eb1933694b4e31bd1c_magniber_revil_zxxz
- Size
  
  24.3MB
- MD5
  
  169a0fda24fc60eb1933694b4e31bd1c
- SHA1
  
  77e143ff1c37a7667e5282499ee04f077dd9255e
- SHA256
  
  04051ffaf3810a46d0a20d3813725f388fbc68c7d9dbee664844274c482666b8
- SHA512
  
  1d16569caeb27db1f9b1d6b4dc8c19dbe2ea98049c15bc29701c4a2b97a2f15f9fc012068124d0f8285f2df2a1856beef9bad1007f216c20cfdd17eca0d04317
- SSDEEP
  
  196608:XP0Hj6JigboXZDwqY8a/qVwsEXX1KOgCu3JK1Op3H2SAmGcWqnlv0189UoiPBx:XPboGX8a/jWWu3cI2D/cWcls1g
Score

7^/10

spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.