Analysis

  • max time kernel
    93s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/04/2024, 02:27

General

  • Target

    2024-04-18_dd555bd4ec3b8121f0fc6e00579d5459_magniber.exe

  • Size

    2.9MB

  • MD5

    dd555bd4ec3b8121f0fc6e00579d5459

  • SHA1

    c2b8f7bb28f7eb261bc5c0814e1d1ef71468cb4f

  • SHA256

    fa0d40fd26f277879bc57cb80c3e48b23f894ffdcc554a5dec492b821c393367

  • SHA512

    5803a4c47c05d3e92b992cad9e0581079ad365f824234c34b90946f5693408447f6678a0d504e32e1cbf94d174f13dc161d2441c8f1d6bb6e5d4d1d132202ab4

  • SSDEEP

    49152:ZnXl9lF/cf/XFpXgxtZPL9HUbPNpqwybZ:bH8Fpqw

Score
9/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 28 IoCs
  • UPX packed file 28 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-18_dd555bd4ec3b8121f0fc6e00579d5459_magniber.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-18_dd555bd4ec3b8121f0fc6e00579d5459_magniber.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4060-0-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-3-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-4-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-5-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-6-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-7-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-8-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-11-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-13-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-15-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-17-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-20-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-22-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-24-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-27-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-29-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-31-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-33-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-36-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-38-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-41-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-43-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-45-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-47-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-49-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-51-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-53-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB

  • memory/4060-54-0x0000000010000000-0x000000001003B000-memory.dmp

    Filesize

    236KB