Analysis
-
max time kernel
151s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
15-08-2023 19:09
General
-
Target
0347902196148ab771382b99d424660b_magniber_JC.exe
-
Size
19.2MB
-
MD5
0347902196148ab771382b99d424660b
-
SHA1
ec10e23dd1243172bf32f2c3a6708c7c8c77d29a
-
SHA256
060ccee34d28fdcd93978fcd2e7d21be1edcd5839a6a9b57bf81b348bcc275b6
-
SHA512
46b0e41bfc570cd348fa5f136a5947aba0ee3a3385d3df42fa8eb39e72a7247b3950be7c5776e8cada2cbb95b3d6b74ee2cc2c93368821a903767d699513e8f5
-
SSDEEP
393216:o3ifOR8Cd9UTc1eHxpLkrdInmvj67qyzcIPnG8cPcT6v:dq7UA1eHxlkJInmvmqCGhMk
Malware Config
Signatures
-
UPX packed file 17 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Loads dropped DLL 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of AdjustPrivilegeToken 64 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0347902196148ab771382b99d424660b_magniber_JC.exe"C:\Users\Admin\AppData\Local\Temp\0347902196148ab771382b99d424660b_magniber_JC.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\Wbem\wmic.exewmic csproduct get UUID2⤵
- Suspicious use of AdjustPrivilegeToken
-
-
C:\Windows\SysWOW64\Wbem\wmic.exewmic csproduct get UUID2⤵
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5c41255933a1b7b4aa656a7de8667e704
SHA1bed4eada23fce8759a20f80cc3750056de3560e6
SHA256de0e17aea3fe13d919e011bca1179ff56b59b0e3c7f5583304f9185724ed2767
SHA512a3761f5be9e20777c426de57fa3cab1be0acc2dd8e10e9cda3c23d6004af88d3c71af68228c80105833f6ed5b41dcaad991f8387336a7deefa63926a26c7e414
-
Filesize
1KB
MD5ffd68007d091d34416952217235ce8a9
SHA1e032c79fcfbe3a91895fa2545da45e152b597e9e
SHA2565aa4931ef072188ac33e5250a515a905fff4b298ce897e32dcf8c7e696f77061
SHA5121cd6261337606e4a448cd065eb5b031cd0d9a6190fce21da59c7862d0a3a18df64a40334fbb44a3a48565f2920aea7b1272bc93d31e439c8cd210fd125aeca43
-
Filesize
1KB
MD5d6303208414ea9d403db3761712d1aff
SHA1b4b817b6d8720cba6f55db709326f5f4334b7d33
SHA256f28b9c74c53ce02a0877ce21b053e362dd963e53a9defd38d7dd37daa7f3726c
SHA5123ac72925a4933df123c2bdb9c4954be5f90f4d577264d1e5bfb6371dd5dbb8e035dcc7dc5d15a1882310d92ba2e48f6ba5a6ffd4b5bad01b122a47d67190faa1
-
Filesize
254B
MD5fd63ca1bd34901d9a2e35a828c719b04
SHA187c390057948011c391d1ef02b1ac2eef52b91ec
SHA256c7674d464bb3f2da2f2f035c2c9a285fd8cef9fb6de8d85e639312cf67d9f1c3
SHA512d03f67a218f47a0756027aa8cc9efff7ebc0b9b9a7858ac39b34db312ccf75a31a9538a5d4d3a6df0f805e12a5253cd38fbe12d2271b3be7f84c4caeace5a8e0
-
Filesize
52B
MD57958829910c74fe243e891f57f864444
SHA14978887a437462618c5ce245ee354a42a5bbe654
SHA256930ac644ca179862ceb673437d6de8e6228018889f98063140e4e9fcfdb2bf6e
SHA512728195ae06ae24c1296fc3b2e451d75beac7750ada18704b7786526591be3bedfd0159c401d0aadb0c5cf3a3cdb725bcd17fcf86ff6efa33b6fd88918c74c11c
-
Filesize
194B
MD538b3aa4d2caee49b823cb3c424e14835
SHA1c1077a0a30055d7c23c6e1db90cdb7eaf763804e
SHA256e57f400d7fa4287484f2a5c52d268c11f4f3ebea6b2526ad0a106ea9cf0371df
SHA51238a7e0b043394a0d59fe6a3024801734e46c1e7b40b6002ae385bdf6aa592231ae2e4427094aa7606eba2ee33b545aedc35638e30843b67714697f733236c353
-
Filesize
256KB
-
Filesize
35.0MB
-
Filesize
176KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
35.0MB
-
Filesize
35.0MB
-
Filesize
3.9MB
-
Filesize
35.0MB
-
Filesize
35.0MB
-
Filesize
3.9MB
-
Filesize
176KB
-
Filesize
1.1MB
-
Filesize
35.0MB
-
Filesize
35.0MB
-
Filesize
176KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
3.9MB
-
Filesize
256KB
-
Filesize
176KB
-
Filesize
1.1MB
-
Filesize
35.0MB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
4KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
3.9MB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
4KB
-
Filesize
35.0MB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
3.9MB
-
Filesize
176KB
-
Filesize
1.1MB
-
Filesize
35.0MB
-
Filesize
176KB
-
Filesize
3.9MB
-
Filesize
1.1MB
-
Filesize
35.0MB
-
Filesize
3.9MB
-
Filesize
35.0MB
-
Filesize
3.9MB
-
Filesize
176KB
-
Filesize
1.1MB
-
Filesize
35.0MB
-
Filesize
3.9MB
-
Filesize
35.0MB
-
Filesize
3.9MB
-
Filesize
256KB
-
Filesize
3.9MB
-
Filesize
35.0MB
-
Filesize
3.9MB
-
Filesize
35.0MB
-
Filesize
3.9MB
-
Filesize
256KB
-
Filesize
3.9MB
-
Filesize
35.0MB
-
Filesize
3.9MB
-
Filesize
35.0MB
-
Filesize
3.9MB