General

  • Target

    2024-06-12_ab7ec9fa2c48c866a7d54fc5a25ee385_floxif_gozi_magniber_revil

  • Size

    37.4MB

  • MD5

    ab7ec9fa2c48c866a7d54fc5a25ee385

  • SHA1

    d3d004d353a3dfa3c50fa89d52c3cca49d37180f

  • SHA256

    0a9c3176fd1053fe64738ccf11a9f801b9cfd4f851e9f83c49d5a5ad9307294d

  • SHA512

    c3f2006a4e304c824b1c960c63355cb21b877e82563fdc1b3f42d934467ab18a0b537bbf123e099a8838a642b9cb14485d88b398ff335eae6b4376f0e8176081

  • SSDEEP

    393216:zWWbJxEMwFak0aUYc58Wa5BMfDaYvaWBv9Le9+wk6rqNuw+AufQ+EhSp0DuAeCYS:SWVxXoFUO5kar+qw+Au3EsBJkv

Score
10/10

Malware Config

Signatures

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-12_ab7ec9fa2c48c866a7d54fc5a25ee385_floxif_gozi_magniber_revil
    .exe windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections