Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    09-06-2024 06:44

General

  • Target

    2024-06-09_174d3e8f059a95f601abb71d8bf91db0_magniber.exe

  • Size

    17.3MB

  • MD5

    174d3e8f059a95f601abb71d8bf91db0

  • SHA1

    c550eeda8f1d1a1d1d7626b308845db7c181f56e

  • SHA256

    70bd26f406fe1d7ec0a5c7642005d90cbd4c3de95218fc7070afc134fed5fe5c

  • SHA512

    d0e5dfcede32f2a66eff62c90c66ca77f1914a069cb929407607bf044c4ab40660c90e10752fc706a0682f1cab830a4e5b4c1b0485ff6a03c566927feedf3996

  • SSDEEP

    393216:8YgkRhym1POju9nwSQXqbsB5+qZa4ypIBogxm28T6IeC/fwqijN:jPRhyc9nwSKpaLpIDxm28un

Score
9/10

Malware Config

Signatures

  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-09_174d3e8f059a95f601abb71d8bf91db0_magniber.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-09_174d3e8f059a95f601abb71d8bf91db0_magniber.exe"
    1⤵
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1256

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1256-6-0x0000000002D70000-0x0000000002D71000-memory.dmp

    Filesize

    4KB

  • memory/1256-14-0x0000000002D70000-0x0000000002D71000-memory.dmp

    Filesize

    4KB