Analysis
-
max time kernel
148s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-01-2024 16:55
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2024-01-25_c0ba839d7af5f62fdb07ee9bac35a176_magniber.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
General
-
Target
2024-01-25_c0ba839d7af5f62fdb07ee9bac35a176_magniber.exe
-
Size
16.7MB
-
MD5
c0ba839d7af5f62fdb07ee9bac35a176
-
SHA1
3e5256590f5436ee3b7498c3abbf527a55eba2e5
-
SHA256
920b87c262f4b75660c4076fee762837b37d54a13cc20b18f16063944de8f057
-
SHA512
064e7201547d12a9cfbd434585c3869973cd5c9c00913af2c7dd4e13508c10e2f200f8b4bc17e1c770ae221828e093950dbbf95bd63901cc71bbf6a556b20320
-
SSDEEP
196608:Ejj3eNG7zpP6SyIR5NhMtvT5nUFqKU0jykFsh39G1p2GShIynMAV0EPafDz2Ytu:ij3eN0tIvhUFJjns7OShIyTuGyaY8
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 2 IoCs
Processes:
resource yara_rule behavioral2/memory/4584-0-0x0000000000400000-0x00000000014C6000-memory.dmp INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA behavioral2/memory/4584-1-0x0000000000400000-0x00000000014C6000-memory.dmp INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA