Overview

overview

10

Static

static

3

2024-05-11...er.exe

windows7-x64

10

2024-05-11...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-11_28c1f5cb75f354a747ef43e1ed643760_magniber

  • Size

    10.8MB

  • Sample

    240511-a31ypsbd5y

  • MD5

    28c1f5cb75f354a747ef43e1ed643760

  • SHA1

    38fdf3a3203ce4f0456f7b3811d9e15cad028d2c

  • SHA256

    74d11e4f3e74ee35c71b0d6fd0d8619665880f245c5b33363399c20ffa7ef474

  • SHA512

    f6e5bef07cdfc0b58904c61421e12aba8f706d55f2954f67d13ac9107a87cd55ddc8959aff1c11a68e07793d4df8e5ae582ff2a7a47d2c0f860e37a0940b12f3

  • SSDEEP

    196608:SxPkQ5QCcncik6Vn40yzZQ5f9tT83T5QPYjN9fEh2uo2uJhkIhYbIpnLRzvR:jQ5QrK6yF6PT83VQwRas52uJrhY8Z1d

Score
10/10
banloaddownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      2024-05-11_28c1f5cb75f354a747ef43e1ed643760_magniber

    • Size

      10.8MB

    • MD5

      28c1f5cb75f354a747ef43e1ed643760

    • SHA1

      38fdf3a3203ce4f0456f7b3811d9e15cad028d2c

    • SHA256

      74d11e4f3e74ee35c71b0d6fd0d8619665880f245c5b33363399c20ffa7ef474

    • SHA512

      f6e5bef07cdfc0b58904c61421e12aba8f706d55f2954f67d13ac9107a87cd55ddc8959aff1c11a68e07793d4df8e5ae582ff2a7a47d2c0f860e37a0940b12f3

    • SSDEEP

      196608:SxPkQ5QCcncik6Vn40yzZQ5f9tT83T5QPYjN9fEh2uo2uJhkIhYbIpnLRzvR:jQ5QrK6yF6PT83VQwRas52uJrhY8Z1d

    Score
    10/10
    banloaddownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks