832c90e531fb951f9b1a046cba22697396e173d07a833ddf9c7571a98c8898dd

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 23:01

Target
2024-06-02_3cfaf71927bc2361bd42d46a4d17f23a_magniber.exe
Size 9.9MB
Sample240602-2z18vabd55
SHA256 832c90e531fb951f9b1a046cba22697396e173d07a833ddf9c7571a98c8898dd
MD5 3cfaf71927bc2361bd42d46a4d17f23a
SHA1 3d4168d8b4c16d5198955d12a7156cd884a5c401
SHA512 0fb274212483762f7fa3a0234efa76e815864a83e31084ea63d286007d8c4fc12c10220baa0ec0583ff1ee6b74699042694a60859891edd1abd497de7a0bb37a
SSDEEP 98304:DdoGzKTvd0pEffP0NSnEU2ryAdFLOAkGkzdnEVomFHKnPpBk:DLuTvdVHPeZ3rZFLOyomFHKnPpB
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2988	2024-06-02_3cfaf71927bc2361bd42d46a4d17f23a_magniber.exe
2988	2024-06-02_3cfaf71927bc2361bd42d46a4d17f23a_magniber.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2988 wrote to memory of 664	2988	2024-06-02_3cfaf71927bc2361bd42d46a4d17f23a_magniber.exe	82
PID 2988 wrote to memory of 664	2988	2024-06-02_3cfaf71927bc2361bd42d46a4d17f23a_magniber.exe	82
PID 2988 wrote to memory of 664	2988	2024-06-02_3cfaf71927bc2361bd42d46a4d17f23a_magniber.exe	82

C:\Users\Admin\AppData\Local\Temp\2024-06-02_3cfaf71927bc2361bd42d46a4d17f23a_magniber.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-02_3cfaf71927bc2361bd42d46a4d17f23a_magniber.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2988
- C:\Windows\SysWOW64\Regsvr32.exe
  Regsvr32 C:\Users\Admin\AppData\Local\Temp\\xm.dll /s
  2⤵
  PID:664