Overview

overview

10

Static

static

1

2024-01-06...er.exe

windows7-x64

10

2024-01-06...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-06_9bf75bcdd004ce776aeca0d10ad4bf29_magniber

  • Size

    3.1MB

  • Sample

    240107-pd7ghseccj

  • MD5

    9bf75bcdd004ce776aeca0d10ad4bf29

  • SHA1

    5f887beca602203dec53ed026fddaa55df1aa216

  • SHA256

    abdc622080e4d77596ef05ed10c620ab6a74094f74c0c8a73d958c4fd11814a8

  • SHA512

    49353b12db7dd608099f3a812162ce7351f89eccc562c6b8c47706283e86e9c92cedde2e38394c4789ff15d66930b6c566f4e3ea18d59d7e61281ded8c0c83fb

  • SSDEEP

    49152:yXBF6NafqnI5TxscosCdRbKa0q5VWy7EeN+V7bVJDF0CbWPSzoiFg4Y:yXqwivcosCdRbLPtQA+V7B8Ld

Score
10/10
banloaddownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      2024-01-06_9bf75bcdd004ce776aeca0d10ad4bf29_magniber

    • Size

      3.1MB

    • MD5

      9bf75bcdd004ce776aeca0d10ad4bf29

    • SHA1

      5f887beca602203dec53ed026fddaa55df1aa216

    • SHA256

      abdc622080e4d77596ef05ed10c620ab6a74094f74c0c8a73d958c4fd11814a8

    • SHA512

      49353b12db7dd608099f3a812162ce7351f89eccc562c6b8c47706283e86e9c92cedde2e38394c4789ff15d66930b6c566f4e3ea18d59d7e61281ded8c0c83fb

    • SSDEEP

      49152:yXBF6NafqnI5TxscosCdRbKa0q5VWy7EeN+V7bVJDF0CbWPSzoiFg4Y:yXqwivcosCdRbLPtQA+V7B8Ld

    Score
    10/10
    banloaddownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks