Analysis
-
max time kernel
147s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
03/08/2023, 17:22
Static task
static1
Behavioral task
behavioral1
Sample
51f4db24f76b9438198cbbd6de8268c7_magniber_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
51f4db24f76b9438198cbbd6de8268c7_magniber_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
51f4db24f76b9438198cbbd6de8268c7_magniber_JC.exe
-
Size
580KB
-
MD5
51f4db24f76b9438198cbbd6de8268c7
-
SHA1
d2ed64ca270241ea98cd1906c346deed864b005d
-
SHA256
2d9be833372f380e739a3277dabca4dc0b2166cbacb445e70bd06e8444d502a6
-
SHA512
cb427b0c86b3a4f9330ad11c4c7a53e062ff60acb0bd989d4b8f5824f843471ffbd9329a03ec09a3f9dd156164dfe5dceb745a08411997606b289ac8ccb105c3
-
SSDEEP
12288:J7vnO4/YjM+yGbIMkVkWTjvoQDbKtIvK5:pP/IylkWPoObKtIy5
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 2192 51f4db24f76b9438198cbbd6de8268c7_magniber_JC.exe 2192 51f4db24f76b9438198cbbd6de8268c7_magniber_JC.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3408354897-1169622894-3874090110-1000\Software\Microsoft\Internet Explorer\Main 51f4db24f76b9438198cbbd6de8268c7_magniber_JC.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2192 51f4db24f76b9438198cbbd6de8268c7_magniber_JC.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2192 51f4db24f76b9438198cbbd6de8268c7_magniber_JC.exe 2192 51f4db24f76b9438198cbbd6de8268c7_magniber_JC.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\51f4db24f76b9438198cbbd6de8268c7_magniber_JC.exe"C:\Users\Admin\AppData\Local\Temp\51f4db24f76b9438198cbbd6de8268c7_magniber_JC.exe"1⤵
- Loads dropped DLL
- Modifies Internet Explorer settings
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2192
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
282KB
MD5ec289a0acf4bcfd8ee9cba8b18d7ce0e
SHA1e312ec699681ca9b879bf381a81c6e96057235b3
SHA2569dfb9baa312020daf0906d24e491b76061cc9971a8abb9e82625a4773af6ac21
SHA512934f8a2850a28d763ae5289d23029cc83983415a09c4408b5ccbc6ee66d2b01b0029ca0f5fed1183c22e19ca34f3601f627c1c251bf140368124f1b2c3f565d0
-
Filesize
282KB
MD5ec289a0acf4bcfd8ee9cba8b18d7ce0e
SHA1e312ec699681ca9b879bf381a81c6e96057235b3
SHA2569dfb9baa312020daf0906d24e491b76061cc9971a8abb9e82625a4773af6ac21
SHA512934f8a2850a28d763ae5289d23029cc83983415a09c4408b5ccbc6ee66d2b01b0029ca0f5fed1183c22e19ca34f3601f627c1c251bf140368124f1b2c3f565d0