General

  • Target

    2024-06-03_a277709591c543151595cfe4a3349a22_magniber_revil

  • Size

    4.3MB

  • Sample

    240603-heve1sgb94

  • MD5

    a277709591c543151595cfe4a3349a22

  • SHA1

    773426d369437812ec45dbdd26e43c6a58012fc6

  • SHA256

    3d68c13d931f42bf19f8df5470e961e1acaab06be2dbce041c28865429ed5f87

  • SHA512

    128d5befd10a0103a6c1b65088420123f34f464af1e72074ae29647965ae002f236a284a640a44d58939614c28bca98dbd739fa7886bc18447e48d0782a74ce8

  • SSDEEP

    49152:L5PigeXnpHEN1zKhYOPCP1/j283IwlgZKUxT2FHF6c9OtutDLNiXicJFFRGNzj3:LUpHm1+hDPS/jPlgDx2D7wRGpj3

Malware Config

Targets

    • Target

      2024-06-03_a277709591c543151595cfe4a3349a22_magniber_revil

    • Size

      4.3MB

    • MD5

      a277709591c543151595cfe4a3349a22

    • SHA1

      773426d369437812ec45dbdd26e43c6a58012fc6

    • SHA256

      3d68c13d931f42bf19f8df5470e961e1acaab06be2dbce041c28865429ed5f87

    • SHA512

      128d5befd10a0103a6c1b65088420123f34f464af1e72074ae29647965ae002f236a284a640a44d58939614c28bca98dbd739fa7886bc18447e48d0782a74ce8

    • SSDEEP

      49152:L5PigeXnpHEN1zKhYOPCP1/j283IwlgZKUxT2FHF6c9OtutDLNiXicJFFRGNzj3:LUpHm1+hDPS/jPlgDx2D7wRGpj3

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks