Analysis
-
max time kernel
121s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
22/10/2023, 10:00
General
-
Target
NEAS.2023-09-05_c235085054d700b9864c013e5d000900_magniber_JC.exe
-
Size
18.4MB
-
MD5
c235085054d700b9864c013e5d000900
-
SHA1
0a57d5e29b937739369ae2038f2a664830c0176b
-
SHA256
e79962b4d77b5024614749192f7a5b821420bef240d6472f4d49e2b278832d8b
-
SHA512
7e68f5729bcd4942b6345cd7e5f3bd7129482f1969815c20c31b64f79a01519b159b5e8d9d918cef54b343fe84989108c99c367801045b6ff014eba59504ad75
-
SSDEEP
196608:kK/c5GImUr/iphmIFbg9MOkdT7DfPTl64A5DxTjbZWH1swGgZCATKWexsK3SHYm:kKrY6hHFs9piU9TjbQHAVCeSK38Y
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Modifies registry class 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.2023-09-05_c235085054d700b9864c013e5d000900_magniber_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.2023-09-05_c235085054d700b9864c013e5d000900_magniber_JC.exe"1⤵
- Checks BIOS information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
43.2MB
-
Filesize
43.2MB
-
Filesize
43.2MB
-
Filesize
43.2MB
-
Filesize
43.2MB
-
Filesize
1.3MB
-
Filesize
43.2MB