Overview

overview

10

Static

static

10

2024-06-19...il.exe

windows7-x64

10

2024-06-19...il.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-19_eae69c6bb38ebbea9b5340b3dd92541c_magniber_revil

  • Size

    4.3MB

  • Sample

    240619-ns1f3szclh

  • MD5

    eae69c6bb38ebbea9b5340b3dd92541c

  • SHA1

    de67f519de2d54b48652552ab53c64077952f133

  • SHA256

    80412098f395d5d768285c3c533719dd1aa718979b54981b1a9c6c248fb42b5e

  • SHA512

    e4765d0ada9101ed5e866a628acced1b9cbcb7d811443c75a4a58d16813f6ea1eadaa0a24e7e7c4471ac10034e90659776078f4d563416e9347375561a146be9

  • SSDEEP

    49152:naRGf+GDHxuS1vKjxa1CPsFRuk3wwlgZKUxT2WHHF6c9OtutTttHXVquqB:naAXHxuS1SjE17FRflgDx2WlXi

Score
10/10
riseprodiscoveryspywarestealer

Malware Config

Targets

    • Target

      2024-06-19_eae69c6bb38ebbea9b5340b3dd92541c_magniber_revil

    • Size

      4.3MB

    • MD5

      eae69c6bb38ebbea9b5340b3dd92541c

    • SHA1

      de67f519de2d54b48652552ab53c64077952f133

    • SHA256

      80412098f395d5d768285c3c533719dd1aa718979b54981b1a9c6c248fb42b5e

    • SHA512

      e4765d0ada9101ed5e866a628acced1b9cbcb7d811443c75a4a58d16813f6ea1eadaa0a24e7e7c4471ac10034e90659776078f4d563416e9347375561a146be9

    • SSDEEP

      49152:naRGf+GDHxuS1vKjxa1CPsFRuk3wwlgZKUxT2WHHF6c9OtutTttHXVquqB:naAXHxuS1SjE17FRflgDx2WlXi

    Score
    10/10
    riseprodiscoveryspywarestealer

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

      stealerrisepro

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks