General

  • Target

    2024-06-15_47d475c282f6997946022cbbf8eac80b_magniber_revil

  • Size

    4.3MB

  • Sample

    240615-ty9vlaxbne

  • MD5

    47d475c282f6997946022cbbf8eac80b

  • SHA1

    fa9aea08d16a8f1bd511c608c6741ff42fefd008

  • SHA256

    958789b423861318f328098d5f3c2d210f311ce3e80ceb48dd3c769b9d1b9b89

  • SHA512

    fd5c99014796379fdb18add9b628427394f84294978d11a9cd775d7ce5cf90a00822cd1904048b95fd142c66f6e86631799d287885d1cb7b07eafa5c37ab63f5

  • SSDEEP

    49152:PaRGf+GDHxup1vKjxa1CPsFRuX35gZKUxT21HHF6c9OtutTxLNiXicJFFRGNzj3:PaAXHxup1SjE17FRCgDx21n7wRGpj3

Malware Config

Targets

    • Target

      2024-06-15_47d475c282f6997946022cbbf8eac80b_magniber_revil

    • Size

      4.3MB

    • MD5

      47d475c282f6997946022cbbf8eac80b

    • SHA1

      fa9aea08d16a8f1bd511c608c6741ff42fefd008

    • SHA256

      958789b423861318f328098d5f3c2d210f311ce3e80ceb48dd3c769b9d1b9b89

    • SHA512

      fd5c99014796379fdb18add9b628427394f84294978d11a9cd775d7ce5cf90a00822cd1904048b95fd142c66f6e86631799d287885d1cb7b07eafa5c37ab63f5

    • SSDEEP

      49152:PaRGf+GDHxup1vKjxa1CPsFRuX35gZKUxT21HHF6c9OtutTxLNiXicJFFRGNzj3:PaAXHxup1SjE17FRCgDx21n7wRGpj3

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks