Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
697c14537e55dcd129a954caca0f15dc_magniber_JC.exe
-
Size
10.6MB
-
Sample
230822-s9naaseg9t
-
MD5
697c14537e55dcd129a954caca0f15dc
-
SHA1
dc8bbf7afdb3dfd5c8e329b7f7454d8fdd16f6e1
-
SHA256
4b5e0d42d5d05b46f118ce69366c70603c22b3e7b0864db00a6a827bc29909b7
-
SHA512
e929b828fdbb2a1691a5db21fabe34a433457a366047f2f4d8391a37025a1c8c0d83b64bb2b79a4319b66170645f64d53352ec50ef933398576bb22a5f3ea54b
-
SSDEEP
98304:Vi0TIMzKpXOM4hMMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMMMqNMMzMMMUMMVL:Y0TI2lpJw0I2lyz
Behavioral task
behavioral1
Sample
697c14537e55dcd129a954caca0f15dc_magniber_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
697c14537e55dcd129a954caca0f15dc_magniber_JC.exe
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
697c14537e55dcd129a954caca0f15dc_magniber_JC.exe
-
Size
10.6MB
-
MD5
697c14537e55dcd129a954caca0f15dc
-
SHA1
dc8bbf7afdb3dfd5c8e329b7f7454d8fdd16f6e1
-
SHA256
4b5e0d42d5d05b46f118ce69366c70603c22b3e7b0864db00a6a827bc29909b7
-
SHA512
e929b828fdbb2a1691a5db21fabe34a433457a366047f2f4d8391a37025a1c8c0d83b64bb2b79a4319b66170645f64d53352ec50ef933398576bb22a5f3ea54b
-
SSDEEP
98304:Vi0TIMzKpXOM4hMMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMMMqNMMzMMMUMMVL:Y0TI2lpJw0I2lyz
Score10/10-
Modifies WinLogon for persistence
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-