Analysis
-
max time kernel
140s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
02-04-2024 11:06
General
-
Target
2024-04-02_cae2db2545f69055470d5c6251347292_magniber.exe
-
Size
5.4MB
-
MD5
cae2db2545f69055470d5c6251347292
-
SHA1
36a32b468671cde5e60c25bc441347d1ffb4ab58
-
SHA256
6b2d4b26116a05b9b22acac60c3cd161ecbac4148b0a11da5cdc556c719e866d
-
SHA512
e23d73a7252d53a53fb5a185a1ab29ebc328d14d2b4122c13c1cc4b4d534e47bb00a0a806879da568c2a56f206e07a4cd7e2ffd6aac580cd338bd99c3f3a712c
-
SSDEEP
98304:ACQ3TpNKyp29plZSMVXS+ZuEkZ0bc90tJ3+9C3UAm0Hc4gz:ACkNKG29pjzH5k2brYh0Hiz
Score
10/10
Malware Config
Signatures
-
Banload
Banload variants download malicious files, then install and execute the files.
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Modifies registry class 6 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-02_cae2db2545f69055470d5c6251347292_magniber.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-02_cae2db2545f69055470d5c6251347292_magniber.exe"1⤵
- Checks BIOS information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
-
Filesize
10.8MB
-
Filesize
2.0MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
10.8MB
-
Filesize
2.0MB
-
Filesize
4KB