Overview

overview

3

Static

static

3

2024-04-30...er.exe

windows7-x64

1

2024-04-30...er.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 01:55

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-04-30_b76739cc516b04da138a551f96336998_magniber.exe

  • Size

    4.2MB

  • MD5

    b76739cc516b04da138a551f96336998

  • SHA1

    bfea274140f4bf94eefc0fd41782ae85ff13a246

  • SHA256

    a574bc59bb322117f4d3df162de2da24a67c4b3cb27dcc86c1cf63cb0f332112

  • SHA512

    f20ea65a9ecdb91e7a9628437c9fd7b4b4b5cabf15052dc66ece244539889b128aa8655d750d93796d387315cbc762f6ad3f8b3f3d458dd9126b6e27661c0959

  • SSDEEP

    98304:cQcc56RpaoUHymd5wA4H33wXUYbVWW/8hDOX:ncc56RpaoUSmd5w9HwkYbQlDOX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-30_b76739cc516b04da138a551f96336998_magniber.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-30_b76739cc516b04da138a551f96336998_magniber.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2372

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\ProgramData\Tencent\QQPCMgr\QQPCMgrInstall_20240430015545.Log
          Filesize

          1KB

          MD5

          63f726228af90e4705b2e3c87bf6e0c7

          SHA1

          627aa1be2b1a6fa65b378628023a0387e440dc86

          SHA256

          7c34541bea167ef4b192f8f31f40cae9f871f55b9b2dc933075a9f510fded933

          SHA512

          80cbfdec5e5d9ed9eda31cfb5c3b7f89309490410be1bd47cb7d4f5114482d6036b4ba5e1d5d9694fdf99b871951e969d9904230cb6aa97b824a89f719067550

          Download Submit

        • memory/2372-12-0x0000000003190000-0x0000000003191000-memory.dmp

          Filesize

          4KB

          Download

        • memory/2372-21-0x0000000003190000-0x0000000003191000-memory.dmp

          Filesize

          4KB

          Download