General

  • Target

    2024-04-28_33767700d76ec06fc23048c79445eac6_magniber

  • Size

    8.8MB

  • Sample

    240428-e4f25sga89

  • MD5

    33767700d76ec06fc23048c79445eac6

  • SHA1

    125e1c1e827ae5e5f1bdfdd5d64aa6ff60912c85

  • SHA256

    0f41f36f74377aa707776bdfd5f4a8946e75bf77fec65d14288de7ce31ea2fd2

  • SHA512

    5a1ac089707ea6075d79d31d79cf1d51cb84534cf21aa841c5549949c423e862ce899a23c9c0074d718fab37d5b15bbf1f5915694c851b4978f7d5525f2186dc

  • SSDEEP

    98304:xmCMLyAw3LNIsVqygGP0w1sBJ1QttoFCqkKq7NO55f0pmsOWrqufezvWq/vUv2T1:PJBILX6svTCZWfFWrqufezvWqHUK

Malware Config

Targets

    • Target

      2024-04-28_33767700d76ec06fc23048c79445eac6_magniber

    • Size

      8.8MB

    • MD5

      33767700d76ec06fc23048c79445eac6

    • SHA1

      125e1c1e827ae5e5f1bdfdd5d64aa6ff60912c85

    • SHA256

      0f41f36f74377aa707776bdfd5f4a8946e75bf77fec65d14288de7ce31ea2fd2

    • SHA512

      5a1ac089707ea6075d79d31d79cf1d51cb84534cf21aa841c5549949c423e862ce899a23c9c0074d718fab37d5b15bbf1f5915694c851b4978f7d5525f2186dc

    • SSDEEP

      98304:xmCMLyAw3LNIsVqygGP0w1sBJ1QttoFCqkKq7NO55f0pmsOWrqufezvWq/vUv2T1:PJBILX6svTCZWfFWrqufezvWqHUK

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks