Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/02/2024, 04:44

General

  • Target

    2024-02-22_066e803b36c6af6a08395ec5ebdf4de5_magniber.exe

  • Size

    7.7MB

  • MD5

    066e803b36c6af6a08395ec5ebdf4de5

  • SHA1

    8e2a279fe9a36565244640479bbc23cb247d9977

  • SHA256

    a283f1dbbea38c6c36a91587d562180da4a7d0d13dd5bf49d8f7147a96948a39

  • SHA512

    ae770d333e67e007e19ff65d3b7828e64bf23fb9dfe3240f0510ea65aea44b804e438af24f79223a5057bb0044f20964cda68069c1db1a1b70b83f89e8066124

  • SSDEEP

    196608:yvpPBFBagQs2ix9/iUVMP8Kxt+Gws4h/hiwsZh/hiwsF:ynFBagQs2ix9li8Ds4h/hvsZh/hvsF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies system certificate store 2 TTPs 9 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-22_066e803b36c6af6a08395ec5ebdf4de5_magniber.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-22_066e803b36c6af6a08395ec5ebdf4de5_magniber.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Modifies system certificate store
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2944

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9c2dc4e5816a2bf50970dac408bd829

    SHA1

    b1a932606662ca045ad1de36b037451221fb6416

    SHA256

    e0e44a31dbf7bf1d93d1e8497a18a5725f0b313a183a1a14a6d3b85261ee956e

    SHA512

    5f500cf7f7d43a7cecba7a927711c0fb7a3cfc8450e84b830180a941f649e4bc3be71c66d77af98069aea159e7b315ee510775a51ba57064ad5f9665ee09953f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    323488d095cbf544de1f97613f902265

    SHA1

    9fde7f4822bec037589b4ed9cf40f77769381aa0

    SHA256

    911cd56daa55eb3b54f3679d675e84789ccedaccee171019edf9eb17160c0c3b

    SHA512

    74b09f069009e79ec9ba227813ef820a64d0de2669dee6c313db042e736d7223f6d2e6a9052bc9e915f1683e9dbebe63d0fa7fdf7b0df2e9952149cbe3d46473

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d2a04f22bf2d7737d0837c86750e22a

    SHA1

    356498dc92fb2541b299201d276893e0db32e78b

    SHA256

    4d51e877d4f1294a614bfe3124116858461e85e4d550e1dda761d5e9e6de0727

    SHA512

    5f9a7c2c9b32b2730afb08b767dbf0963d8bb211982661ed24a730d4635a51f6f714d2b9b2212e7dba2434147602028a3c5fe5cf49f5db2ccb32c31856c212cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97f47ae9acfd8a296b028915aca65ad6

    SHA1

    810209c881322a7ada210ef734f659d12a48b1ee

    SHA256

    09dfb2fb512381ce1176a75fc151075b04d12502c03956771d27bc995906650e

    SHA512

    b91f4b89838d276be7bacf7d8940613f83d86447578fe0a7d5dc6179ea791ce1742543cea731802716c6c4109f3278a3e18753c70db09c68cc9ef1d09b3e5572

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c57f097727c48a4d9582bb51cb8ffe38

    SHA1

    50a75060f2419fd39030fff29612360e6e1890b7

    SHA256

    0d0e14d6d70c93dddf64d3f76b33af4833119fd1f106c5e4fb28dab4526a3280

    SHA512

    e607e0846d1e053749105eb7b9001a5319abb8071ff47c4ea8881d2bcb520c7c5b222382eb928afd9e3a577b3decfc830d00b83600611c9b156ec36e2a686555

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    acde1143e1fda4bda0ed4f71ef0cd317

    SHA1

    847d5539f8d5b2f00b45bc8f11829fdb8b7596b9

    SHA256

    a83452810e827f9b2d67bd22c9b12d1333c44ed317852b2a6ff3d3d559561352

    SHA512

    def492e87e2410cd283a562b1f29af840615fba6445c7dcc737b987bb053bd6df3e66b5bc4ce01a96cefc0de7a4dc8664114687a1ec1dd3881a585250b257e25

  • C:\Users\Admin\AppData\Local\Temp\Cab2741.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar27C1.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06