Overview

overview

10

Static

static

10

2024-06-23...il.exe

windows7-x64

10

2024-06-23...il.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-23_79527ada2268a9f517373d4ce0465bfd_magniber_revil

  • Size

    4.3MB

  • Sample

    240623-t1t7xs1arj

  • MD5

    79527ada2268a9f517373d4ce0465bfd

  • SHA1

    52f00b743ef8ebca2214f1025e92dfee9881dd4c

  • SHA256

    5f7353e35fbc4c21f022693339c1d9f695472ae28460464fbe2892ff8221eb88

  • SHA512

    a9d42b0fe48dbfbc13e1cc714e9a5757ef48b22d549ab3bb1dd87262b3556c1310c6d7ffd5e6c9bdf74288e98d2a542bca9b7b376f81ba5d35b858d50017b6de

  • SSDEEP

    49152:zaRGf+GDHxuC1vKjxa1CPsFRuX35gZKUxT21HHF6c9OtutTjI/uj1tObh95O:zaAXHxuC1SjE17FRCgDx21iOUv4

Score
10/10
riseprodiscoveryspywarestealer

Malware Config

Targets

    • Target

      2024-06-23_79527ada2268a9f517373d4ce0465bfd_magniber_revil

    • Size

      4.3MB

    • MD5

      79527ada2268a9f517373d4ce0465bfd

    • SHA1

      52f00b743ef8ebca2214f1025e92dfee9881dd4c

    • SHA256

      5f7353e35fbc4c21f022693339c1d9f695472ae28460464fbe2892ff8221eb88

    • SHA512

      a9d42b0fe48dbfbc13e1cc714e9a5757ef48b22d549ab3bb1dd87262b3556c1310c6d7ffd5e6c9bdf74288e98d2a542bca9b7b376f81ba5d35b858d50017b6de

    • SSDEEP

      49152:zaRGf+GDHxuC1vKjxa1CPsFRuX35gZKUxT21HHF6c9OtutTjI/uj1tObh95O:zaAXHxuC1SjE17FRCgDx21iOUv4

    Score
    10/10
    riseprodiscoveryspywarestealer

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

      stealerrisepro

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks