2024-06-03_fc7b331d221bea435a521f2f0ea43a83_magniber_revil

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-03_fc7b331d221bea435a521f2f0ea43a83_magniber_revil
Size

10.8MB
MD5

fc7b331d221bea435a521f2f0ea43a83
SHA1

a0b629abb3d96c47c62004218fb7f047c06619c0
SHA256

bdb57f221734a89a3501cfc4ddb7c6b87f6711a753fec24ee1f8224ec99f8c46
SHA512

9daaa46a190adaf9b2ca9669340f08498a389ffdb42071dc0eb69db39a8e369034a2816fa376796535aadc2678740bcd4f1703b3ae5c8026f6ab8adc905f8364
SSDEEP

196608:FxXPxVUuwtPCsENzXn4d/nuVutYkjifOznOzHOzUOzFI7HR73JIbiJP8q5dSGjsu:FxXfJoKAtYypFuSX0Ogv8BBXoP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-03_fc7b331d221bea435a521f2f0ea43a83_magniber_revil

Files

2024-06-03_fc7b331d221bea435a521f2f0ea43a83_magniber_revil
.exe windows:6 windows x86 arch:x86

4726395af6233517b1d4dce3ac40f0ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
OpenEventA
GetLogicalProcessorInformation
CreateWaitableTimerA
FormatMessageA
OutputDebugStringW
MoveFileExW
SetEnvironmentVariableA
GetVersionExA
CreateMutexW
GetACP
ExitProcess
GetLocalTime
GetFileType
DosDateTimeToFileTime
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
QueryPerformanceFrequency
FreeLibraryAndExitThread
GetModuleHandleExW
SetConsoleCtrlHandler
HeapQueryInformation
GetCommandLineA
GetCommandLineW
VirtualAlloc
VirtualQuery
SetStdHandle
GetStdHandle
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleCP
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
LCMapStringW
SwitchToThread
ExitThread
SignalObjectAndWait
GetThreadPriority
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
TryEnterCriticalSection
VirtualFree
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue
QueueUserAPC
Sleep
SetWaitableTimer
CreateEventW
CreateEventA
WaitForMultipleObjectsEx
GetStringTypeW
GlobalMemoryStatus
FlushConsoleInputBuffer
GetSystemTime
ReadConsoleInputA
SetConsoleMode
WaitForSingleObjectEx
SleepEx
WaitForSingleObject
ReleaseSemaphore
SetEvent
DeleteCriticalSection
InitializeCriticalSectionEx
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
GetProcessHeap
HeapSize
HeapFree
GetDriveTypeW
PeekNamedPipe
HeapReAlloc
HeapAlloc
GetCurrentProcessId
TerminateProcess
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
OpenProcess
GetSystemTimeAsFileTime
WaitForMultipleObjects
OpenMutexA
CreateSemaphoreA
CreateWaitableTimerW
GetPrivateProfileStringA
VerifyVersionInfoW
MultiByteToWideChar
GetModuleFileNameW
GetEnvironmentVariableW
CreateFileA
DeviceIoControl
GetCurrentProcess
CreateProcessW
SetLastError
GetLastError
RaiseException
CloseHandle
DecodePointer
GetThreadTimes
GetNativeSystemInfo
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryW
WritePrivateProfileStringA
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Module32FirstW
Module32NextW
CreateDirectoryW
DeleteFileW
InitializeCriticalSection
GetModuleFileNameA
GetPrivateProfileIntW
GetTickCount
ReleaseMutex
CreateMutexA
FreeResource
LoadResource
SizeofResource
FindResourceW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
SetFileAttributesW
CopyFileW
CreateFileW
lstrcpyW
GetSystemInfo
GetSystemDirectoryW
GetModuleHandleA
WriteFile
CreateThread
GetVersionExW
SetUnhandledExceptionFilter
GetCurrentThreadId
OutputDebugStringA
GlobalAlloc
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
LocalAlloc
LocalReAlloc
LocalFree
LockResource
GlobalSize
MulDiv
SetThreadPriority
ResumeThread
CompareStringW
lstrcmpA
GlobalGetAtomNameW
GetTempPathW
FileTimeToSystemTime
SystemTimeToFileTime
EncodePointer
LoadLibraryExW
LoadLibraryA
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
ResetEvent
GetUserDefaultLCID
GetTempFileNameW
SearchPathW
GetProfileIntW
GetWindowsDirectoryW
FindResourceExW
GetCurrentDirectoryW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
VirtualProtect
GetUserDefaultUILanguage
GetLocaleInfoW
GetCurrentThread
GlobalFlags
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
VerSetConditionMask

user32

NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
DeleteMenu
SetCursor
ShowOwnedPopups
LoadImageW
InvalidateRect
TrackMouseEvent
IntersectRect
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
OffsetRect
SetRectEmpty
GetMenuDefaultItem
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongW
SetWindowRgn
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
TrackPopupMenu
SendDlgItemMessageA
CopyImage
InflateRect
GetMenuItemInfoW
FillRect
GetWindowDC
TabbedTextOutW
IsZoomed
DrawTextExW
DrawTextW
RealChildWindowFromPoint
GetDesktopWindow
ClientToScreen
CharUpperW
DestroyIcon
GetSystemMenu
BringWindowToTop
SetCursorPos
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MessageBoxA
GetUserObjectInformationW
GetProcessWindowStation
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
SetTimer
GetClassNameW
GetClassLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
FindWindowW
InvalidateRgn
GetCaretPos
ShowCaret
CharPrevW
CharNextW
RegisterClassExW
GetCaretBlinkTime
SetCaretPos
CreateCaret
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
EndPaint
BeginPaint
GetForegroundWindow
SetActiveWindow
SetMenu
GetMenu
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetCapture
SetFocus
GetDlgCtrlID
GetWindowRgn
DestroyCursor
AppendMenuW
DestroyMenu
CreatePopupMenu
GrayStringW
GetDlgItem
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
GetWindowTextLengthW
PostQuitMessage
PostMessageW
SendMessageW
SystemParametersInfoW
SetWindowLongW
GetWindowLongW
GetWindowTextW
LoadCursorW
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
CallNextHookEx
SetWindowsHookExW
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
RemoveMenu
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetLastActivePopup
GetWindowThreadProcessId
GetParent
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
LoadIconW
GetCursorPos
KillTimer
MoveWindow
GetWindow
wsprintfW
MessageBoxW
SetForegroundWindow
UpdateWindow
GetTopWindow

gdi32

GetCharABCWidthsW
GetObjectA
GetTextFaceW
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
OffsetRgn
GetRgnBox
Rectangle
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
CreateCompatibleBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExW
GetTextMetricsW
DPtoLP
SetRectRgn
PatBlt
CreateRectRgnIndirect
CombineRgn
GetTextExtentPoint32W
CreateFontIndirectW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetTextAlign
SetStretchBltMode
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
DeleteObject
GetObjectW
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCW
CopyMetaFileW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

CryptEnumProvidersA
CryptSignHashA
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
RegCloseKey
RegOpenKeyExW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
ReportEventA
RegisterEventSourceA
DeregisterEventSource
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExW
RegEnumKeyExW
RegDeleteValueW

shell32

SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
Shell_NotifyIconW
SHGetFileInfoW
ShellExecuteW
SHGetDesktopFolder
DragQueryFileW
DragFinish
SHAppBarMessage
SHBrowseForFolderW
SHGetPathFromIDListW

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CLSIDFromString
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
CLSIDFromProgID
CoCreateGuid

oleaut32

SysFreeString
LoadTypeLi
SysAllocString
VariantInit
VarBstrFromDate
VariantChangeType
VariantCopy
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen

iphlpapi

GetAdaptersInfo
GetExtendedTcpTable

shlwapi

StrFormatKBSizeW
PathRemoveFileSpecW
PathFindExtensionW
wnsprintfW
PathIsUNCW
PathFindFileNameW
PathStripToRootW

ws2_32

htonl
closesocket
inet_ntoa
ntohl
ntohs
select
setsockopt
WSAStartup
WSACleanup
WSASetLastError
WSAGetLastError
bind
ioctlsocket
inet_addr
getpeername
recv
recvfrom
send
sendto
socket
htons
WSASend
WSAIoctl
getsockopt
getsockname
connect
accept
__WSAFDIsSet
freeaddrinfo
getaddrinfo
listen
WSARecv
shutdown
WSAStringToAddressW
WSASocketW

mswsock

GetAcceptExSockaddrs
AcceptEx

msimg32

TransparentBlt
AlphaBlend

uxtheme

DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsAppThemed
GetThemeSysColor
GetThemePartSize
DrawThemeText
IsThemeBackgroundPartiallyTransparent

gdiplus

GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipLoadImageFromStream
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdiplusStartup
GdipAddPathArcI
GdipAddPathLineI
GdipDeletePath
GdipCreatePath
GdipDrawRectangleI
GdipSetPenMode
GdipDrawLineI
GdipSetPenDashStyle
GdipDeletePen
GdipCreatePen1
GdipFillRectangleI
GdipDrawString
GdipMeasureString
GdipDeleteBrush
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdiplusShutdown
GdipDrawPath
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipCreateSolidFill

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmSetCompositionWindow
ImmGetContext

dbghelp

MiniDumpWriteDump

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

winmm

PlaySoundW

comctl32

_TrackMouseEvent
ord17

crypt32

CertGetCertificateContextProperty
CertFindCertificateInStore
CertOpenStore
CertFreeCertificateContext
CertEnumCertificatesInStore
CertCloseStore
CertDuplicateCertificateContext

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 883KB - Virtual size: 882KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 619KB - Virtual size: 618KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4726395af6233517b1d4dce3ac40f0ab

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

iphlpapi

shlwapi

ws2_32

mswsock

msimg32

uxtheme

gdiplus

imm32

dbghelp

oleacc

winmm

comctl32

crypt32

Sections

.text Size: 3.6MB - Virtual size: 3.6MB

.rdata Size: 883KB - Virtual size: 882KB

.data Size: 89KB - Virtual size: 124KB

.rsrc Size: 619KB - Virtual size: 618KB

.reloc Size: 243KB - Virtual size: 243KB

.text
Size: 3.6MB - Virtual size: 3.6MB

.rdata
Size: 883KB - Virtual size: 882KB

.data
Size: 89KB - Virtual size: 124KB

.rsrc
Size: 619KB - Virtual size: 618KB

.reloc
Size: 243KB - Virtual size: 243KB