Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 20:24

General

  • Target

    2024-05-28_013ad31abdf8feb0aa2c945a5caa918c_avoslocker_magniber.exe

  • Size

    10.0MB

  • MD5

    013ad31abdf8feb0aa2c945a5caa918c

  • SHA1

    6ec8570950ae6549fa21b61a17117f0aff9ba659

  • SHA256

    f03a74ad67167ab4e9ac01760192ca3857c8765fb49124c2617852f952e858ac

  • SHA512

    6e0f68e29aba2cbb80471f3ddae44ddfa3f04b5ee5a55bcd606083a652d2e181b9004b885cb66b0d40f40218ed61c01a1fcc174a039a1ba8f8e1f4406cab1f8b

  • SSDEEP

    196608:VI8mKkZ8qBljLbrnGHr3m8kTyYjfLJCGt3rcK/wNy:m22lYzkmyL1prcts

Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-28_013ad31abdf8feb0aa2c945a5caa918c_avoslocker_magniber.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-28_013ad31abdf8feb0aa2c945a5caa918c_avoslocker_magniber.exe"
    1⤵
    • Enumerates connected drives
    • Suspicious use of SetWindowsHookEx
    PID:2900

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads