Overview

overview

10

Static

static

10

Magicratbg...xe.exe

windows7-x64

10

Magicratbg...xe.exe

windows10-2004-x64

10

User tags

Assigned on submission by the user, not by sandbox detections.

Threatview.io Proactive Hunter

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Magicratbggdhgejff1_browsingExe.exe.1

  • Size

    18.5MB

  • Sample

    230811-w8fqlsaa3w

  • MD5

    b4c9b903dfd18bd67a3824b0109f955b

  • SHA1

    a3555a77826df6c8b2886cc0f40e7d7a2bd99610

  • SHA256

    f6827dc5af661fbb4bf64bc625c78283ef836c6985bb2bfb836bd0c8d5397332

  • SHA512

    73ec5620b9c607c96e883d95ac6ea4033444cb74def871d16875bb90cdf6560e592c1dcb9d6e9b406cd7d238464f46f61ca5f95bf07b0367ee826971ff151aed

  • SSDEEP

    196608:99rTfn5Mp6Z9j2ujTh4e9q77AJsv6tWKFdu9CqK:9F+p6Z3Ph4e9qoJsv6tWKFdu9C

Score
10/10
magicratrattrojan

Malware Config

Targets

    • Target

      Magicratbggdhgejff1_browsingExe.exe.1

    • Size

      18.5MB

    • MD5

      b4c9b903dfd18bd67a3824b0109f955b

    • SHA1

      a3555a77826df6c8b2886cc0f40e7d7a2bd99610

    • SHA256

      f6827dc5af661fbb4bf64bc625c78283ef836c6985bb2bfb836bd0c8d5397332

    • SHA512

      73ec5620b9c607c96e883d95ac6ea4033444cb74def871d16875bb90cdf6560e592c1dcb9d6e9b406cd7d238464f46f61ca5f95bf07b0367ee826971ff151aed

    • SSDEEP

      196608:99rTfn5Mp6Z9j2ujTh4e9q77AJsv6tWKFdu9CqK:9F+p6Z3Ph4e9qoJsv6tWKFdu9C

    Score
    10/10
    magicratrattrojan

    • Detected MagicRAT payload

    • magicrat

      MagicRAT is a remote access trojan developed and operated by the Lazarus APT group.

      trojanratmagicrat

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks