Overview

overview

10

Static

static

10

2024-02-25...er.exe

windows7-x64

9

2024-02-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-25_610401ebc7be2c4ba18fb20eb2e36df0_magniber

  • Size

    3.9MB

  • Sample

    240225-fe9htsbf94

  • MD5

    610401ebc7be2c4ba18fb20eb2e36df0

  • SHA1

    c7ab7cc7cae5ef62dd0fb72514bc24d1681f1f34

  • SHA256

    ec9b7c83b744d1007398a74cd8fd7f1fa109b657e1ea057ec35ee4162df9f983

  • SHA512

    e60e9f9840cac4060bb2a4c34d883d76248b2e40e4f332606994ecf8561bdc7282932772e7e7620c393422416aabf13f0269ca82ad98ec8e0f5dc95be9dcc92d

  • SSDEEP

    24576:30w5hBTnxx335ZNOdNaeae7h0qTk8PHs1urNwJbKkKF/eMNPjtCNxvwDIW6tW1Mc:30W35uNaeae7nHzxO9KFeM6i8SZL

Score
10/10
vmprotect

Malware Config

Targets

    • Target

      2024-02-25_610401ebc7be2c4ba18fb20eb2e36df0_magniber

    • Size

      3.9MB

    • MD5

      610401ebc7be2c4ba18fb20eb2e36df0

    • SHA1

      c7ab7cc7cae5ef62dd0fb72514bc24d1681f1f34

    • SHA256

      ec9b7c83b744d1007398a74cd8fd7f1fa109b657e1ea057ec35ee4162df9f983

    • SHA512

      e60e9f9840cac4060bb2a4c34d883d76248b2e40e4f332606994ecf8561bdc7282932772e7e7620c393422416aabf13f0269ca82ad98ec8e0f5dc95be9dcc92d

    • SSDEEP

      24576:30w5hBTnxx335ZNOdNaeae7h0qTk8PHs1urNwJbKkKF/eMNPjtCNxvwDIW6tW1Mc:30W35uNaeae7nHzxO9KFeM6i8SZL

    Score
    9/10
    vmprotect

    • Detects executables packed with VMProtect.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks