Overview

overview

10

Static

static

1

2024-03-28...er.exe

windows7-x64

10

2024-03-28...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-28_14d496616700b2f6c7f04f23bbdca13b_magniber

  • Size

    3.8MB

  • Sample

    240328-c7khmaba89

  • MD5

    14d496616700b2f6c7f04f23bbdca13b

  • SHA1

    803a0a3134c0976e15c02e2132e4179522880f72

  • SHA256

    390e4346cd986061f2e0ce97cd6fc33e8fe56d1d140116567133ff3143c529e6

  • SHA512

    1eaaf48101efb128a28511ef562cb53119f51afb5909ff3191e3cab576509f2d4540a7a28d2f3b7db65b91b2900914d4f11efaf6268452fe7207e650c21671e3

  • SSDEEP

    98304:Pzh1pj3mPzSyZNpU/iDv4QCpOeAJv/N1MF3dj:PzhnyPzSyzR3N1Adj

Score
10/10
banloaddownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      2024-03-28_14d496616700b2f6c7f04f23bbdca13b_magniber

    • Size

      3.8MB

    • MD5

      14d496616700b2f6c7f04f23bbdca13b

    • SHA1

      803a0a3134c0976e15c02e2132e4179522880f72

    • SHA256

      390e4346cd986061f2e0ce97cd6fc33e8fe56d1d140116567133ff3143c529e6

    • SHA512

      1eaaf48101efb128a28511ef562cb53119f51afb5909ff3191e3cab576509f2d4540a7a28d2f3b7db65b91b2900914d4f11efaf6268452fe7207e650c21671e3

    • SSDEEP

      98304:Pzh1pj3mPzSyZNpU/iDv4QCpOeAJv/N1MF3dj:PzhnyPzSyzR3N1Adj

    Score
    10/10
    banloaddownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks