General

  • Target

    2024-06-15_bcff53e76ce0a6c7f8a332f7d1686854_magniber_revil

  • Size

    4.3MB

  • Sample

    240615-xn12gsvhmm

  • MD5

    bcff53e76ce0a6c7f8a332f7d1686854

  • SHA1

    33de0244405a716ace53cf737cad54f074a56015

  • SHA256

    20b21f5fef7436e3fb577ef499800706518e28bb191301ee3db90050626cf4bd

  • SHA512

    57127334c0e28b842f8d5bf2240fbc34b6998bce833c285ddd52ddbbf418dc6f8692e822923891560aa76f81c88c278d3b926eb2d324064dfae64b75462c99fc

  • SSDEEP

    49152:o5PigeXnpHEM1zKhYOPCP1/j2T37gZKUxT2cHF6c9OtutF+YktHRFcbtUKA:oUpH71+hDPS/j4gDx2++YwHRkeK

Malware Config

Targets

    • Target

      2024-06-15_bcff53e76ce0a6c7f8a332f7d1686854_magniber_revil

    • Size

      4.3MB

    • MD5

      bcff53e76ce0a6c7f8a332f7d1686854

    • SHA1

      33de0244405a716ace53cf737cad54f074a56015

    • SHA256

      20b21f5fef7436e3fb577ef499800706518e28bb191301ee3db90050626cf4bd

    • SHA512

      57127334c0e28b842f8d5bf2240fbc34b6998bce833c285ddd52ddbbf418dc6f8692e822923891560aa76f81c88c278d3b926eb2d324064dfae64b75462c99fc

    • SSDEEP

      49152:o5PigeXnpHEM1zKhYOPCP1/j2T37gZKUxT2cHF6c9OtutF+YktHRFcbtUKA:oUpH71+hDPS/j4gDx2++YwHRkeK

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks