Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
26-05-2024 09:51
General
-
Target
2024-05-26_841914449004bfdf497a0f5cdf059b16_magniber.exe
-
Size
8.2MB
-
MD5
841914449004bfdf497a0f5cdf059b16
-
SHA1
841b49c35efbd6184bed1d9cfa7eff39684c6466
-
SHA256
2f70c1d831e28fd85a44d7b8c2e62ec67054002f80d852a04783310dc5c671cd
-
SHA512
b15bba721658883fa96175761f5660e8ccf74e11a617b636c9fd677def455350e8b5a208cf60064ea678f96597a9c323d9e64b9ed683523451a34c1ce31c93bb
-
SSDEEP
196608:4bYrXxze2rphlBf+GSqZuJROIxvZ1f/l2w1YrUCpI0IB48DaE:4bYDxBFhDL2ROI9fn1VCpI0IuK
Score
10/10
Malware Config
Signatures
-
Banload
Banload variants download malicious files, then install and execute the files.
-
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Modifies registry class 5 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-26_841914449004bfdf497a0f5cdf059b16_magniber.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-26_841914449004bfdf497a0f5cdf059b16_magniber.exe"1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.4MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
8.4MB