Overview

overview

7

Static

static

3

2024-10-03...il.exe

windows7-x64

7

2024-10-03...il.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-10-03_f249cf4cd6a793f55574b8cd512df39b_magniber_revil

  • Size

    4.4MB

  • Sample

    241003-pwq79a1fld

  • MD5

    f249cf4cd6a793f55574b8cd512df39b

  • SHA1

    95fd12f3f3dd3cedd8066b27356384d22892210c

  • SHA256

    43f671d2d7537a391efdf904cb86cbc92152afdd5aaeeff29f0c4f58de8203a8

  • SHA512

    b90bf0d167dd6c16edb275ca215df35c6ad0dad78cf76ca3d8310b7ef5eff6e9d0c22afb75929c7d369ed9d3220f55fb6d457787fe4e366b174e258c7fae08f0

  • SSDEEP

    49152:vydU63yzbHuA68FKiouCP5evteVegZKUxT216au68QPxUdJHDmg27RnWGj:vCUhXHuA6QK4GevBgDx218D527BWG

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-10-03_f249cf4cd6a793f55574b8cd512df39b_magniber_revil

    • Size

      4.4MB

    • MD5

      f249cf4cd6a793f55574b8cd512df39b

    • SHA1

      95fd12f3f3dd3cedd8066b27356384d22892210c

    • SHA256

      43f671d2d7537a391efdf904cb86cbc92152afdd5aaeeff29f0c4f58de8203a8

    • SHA512

      b90bf0d167dd6c16edb275ca215df35c6ad0dad78cf76ca3d8310b7ef5eff6e9d0c22afb75929c7d369ed9d3220f55fb6d457787fe4e366b174e258c7fae08f0

    • SSDEEP

      49152:vydU63yzbHuA68FKiouCP5evteVegZKUxT216au68QPxUdJHDmg27RnWGj:vCUhXHuA6QK4GevBgDx218D527BWG

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks