Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    04-06-2024 10:55

General

  • Target

    2024-06-04_2917210d18c8df0b425a8c566aa74ad8_magniber.exe

  • Size

    12.2MB

  • MD5

    2917210d18c8df0b425a8c566aa74ad8

  • SHA1

    0b3386303f904cc67ff2ef1862e0416844bda3e5

  • SHA256

    66c22731fff6caf43a6ac1aee9af54b991d06696e2167b7d7f02939853e42225

  • SHA512

    e5ddafbb819db843f41482d17ab08583e43e3499faf64183ed3f8bea55b0aa4d94869c5eddc7469040ce73de243b130696f535d26aef94aaf10e2deaabf98989

  • SSDEEP

    196608:vPg2CWhGuZvjwQklner7/0S+6JfRbkebsN/cJ67DgKEl9sMvrrqNs2R7/:vYgGG7wFln+3fRb0V7El9s+rqNl/

Score
1/10

Malware Config

Signatures

  • Modifies registry class 3 IoCs
  • Modifies system certificate store 2 TTPs 10 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-04_2917210d18c8df0b425a8c566aa74ad8_magniber.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-04_2917210d18c8df0b425a8c566aa74ad8_magniber.exe"
    1⤵
    • Modifies registry class
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1776

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed2eb4646d32bd58cdc146977da27c83

    SHA1

    6854c669010ca8f093f943559c8f54bf63ff3d6f

    SHA256

    c20f521bd0d85f93c299f18c60c07c49a886a1b0d50499d7768d9528bd75e137

    SHA512

    c83d1aa08d85e1fbe250f0622e9a2ec5f9312be3dff7638f485772aaa6d6896b0d606215e7d1f893e87ffd3f3a52584741a68d18156f7bbca9723d81a5d8efe6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5096ca6fd5bbe50e1c3eab6d90418f39

    SHA1

    b1534c625b58799a4c3bb7e865024c7400cc174f

    SHA256

    bebb5d57f09427581fdac1403b49e9961c2fa15ee9eb8f9eb101061a29ccbb35

    SHA512

    b1190e84b6888e261fce8cc83510a639ad1ce51a840339ab597c9e0ae7f1cb5e920bf7782164e2b1a23d6ea8e9aeea8427cf06bbbc4a01ccd43a9a776be2b352

  • C:\Users\Admin\AppData\Local\Temp\Cab1AB4.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1B47.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b