General

  • Target

    2024-01-27_2e47762ed5f94ac03e28a9408398842f_magniber

  • Size

    19.2MB

  • Sample

    240127-t9s18ahham

  • MD5

    2e47762ed5f94ac03e28a9408398842f

  • SHA1

    d1b3d61b967c88013323d469b9ca06758a6fb8b3

  • SHA256

    f18612de64687383f0e5a85bd805cc602615c9ba78563743c1e38ecbe643391a

  • SHA512

    dcae7637e20e2caee4f47aaa050202ffad694c49766adcea647606168d954cc25184af41d1cff4c37dd4b0a014b1141759eb014d6596927e2f8fba752b5da5d2

  • SSDEEP

    393216:OaVp4ReDeM+kkza+hsEEfhFxw1Rs8gRebKR/aN0CEzp0t:Fp4UF+h6hzwTsHeGR/HCEt4

Malware Config

Targets

    • Target

      2024-01-27_2e47762ed5f94ac03e28a9408398842f_magniber

    • Size

      19.2MB

    • MD5

      2e47762ed5f94ac03e28a9408398842f

    • SHA1

      d1b3d61b967c88013323d469b9ca06758a6fb8b3

    • SHA256

      f18612de64687383f0e5a85bd805cc602615c9ba78563743c1e38ecbe643391a

    • SHA512

      dcae7637e20e2caee4f47aaa050202ffad694c49766adcea647606168d954cc25184af41d1cff4c37dd4b0a014b1141759eb014d6596927e2f8fba752b5da5d2

    • SSDEEP

      393216:OaVp4ReDeM+kkza+hsEEfhFxw1Rs8gRebKR/aN0CEzp0t:Fp4UF+h6hzwTsHeGR/HCEt4

    • Banload

      Banload variants download malicious files, then install and execute the files.

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks