General
-
Target
2024-07-01_6068830154e280bb0c0ca87e57533425_gozi_magniber_revil
-
Size
37.6MB
-
Sample
240701-r6vpja1crk
-
MD5
6068830154e280bb0c0ca87e57533425
-
SHA1
94e5cab7e49fb04ec30ff75b6e3bc4fcea9e792d
-
SHA256
492d4f36465829ece536dbd06aa7010b1d4c0270db158242d296ed6e73a4b696
-
SHA512
990ccda1b69c7a0d3bb43dc3bdf6bb518deb02197395b661b332e55d64cdbf4a740fbab830773c22e4b1afc6d357ee4be12e7ab9a6916f15386bd45c9e68df73
-
SSDEEP
786432:4TuUJP9mP1O9uGVD+6PPZlXMuzw+AuE3sBJm:4TuUJlmP1O9uGVDPxWiOuE3s/
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-01_6068830154e280bb0c0ca87e57533425_gozi_magniber_revil.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-07-01_6068830154e280bb0c0ca87e57533425_gozi_magniber_revil.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-07-01_6068830154e280bb0c0ca87e57533425_gozi_magniber_revil
-
Size
37.6MB
-
MD5
6068830154e280bb0c0ca87e57533425
-
SHA1
94e5cab7e49fb04ec30ff75b6e3bc4fcea9e792d
-
SHA256
492d4f36465829ece536dbd06aa7010b1d4c0270db158242d296ed6e73a4b696
-
SHA512
990ccda1b69c7a0d3bb43dc3bdf6bb518deb02197395b661b332e55d64cdbf4a740fbab830773c22e4b1afc6d357ee4be12e7ab9a6916f15386bd45c9e68df73
-
SSDEEP
786432:4TuUJP9mP1O9uGVD+6PPZlXMuzw+AuE3sBJm:4TuUJlmP1O9uGVDPxWiOuE3s/
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-