Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11/03/2024, 07:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-03-11_df66bed846aa0374a5b839f10c42d394_magniber_sliver.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-03-11_df66bed846aa0374a5b839f10c42d394_magniber_sliver.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
2024-03-11_df66bed846aa0374a5b839f10c42d394_magniber_sliver.exe
-
Size
9.1MB
-
MD5
df66bed846aa0374a5b839f10c42d394
-
SHA1
a4897e227dccfa2194612e3573f79b64ce915f87
-
SHA256
c411e13724286244bc0a177faa76354287e38a57a6cee768c0733dafc40d4ef4
-
SHA512
37ad7bc7732d24dd78cc44e2251841426b934ec608941bfaa05feb19cbbfdb6615301a284e9b3c70fe4e0c97a01f5ebe998522f2a19385d9ccae69076f38c539
-
SSDEEP
196608:A3qI/3OvzSxACoVoQufEwm7Cti9076PXL9sVQBWG:A3qI/evzSxACofui7Ei2ozB
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 2024-03-11_df66bed846aa0374a5b839f10c42d394_magniber_sliver.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2720 2024-03-11_df66bed846aa0374a5b839f10c42d394_magniber_sliver.exe