Analysis

  • max time kernel
    92s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/06/2024, 06:44

General

  • Target

    2024-06-09_174d3e8f059a95f601abb71d8bf91db0_magniber.exe

  • Size

    17.3MB

  • MD5

    174d3e8f059a95f601abb71d8bf91db0

  • SHA1

    c550eeda8f1d1a1d1d7626b308845db7c181f56e

  • SHA256

    70bd26f406fe1d7ec0a5c7642005d90cbd4c3de95218fc7070afc134fed5fe5c

  • SHA512

    d0e5dfcede32f2a66eff62c90c66ca77f1914a069cb929407607bf044c4ab40660c90e10752fc706a0682f1cab830a4e5b4c1b0485ff6a03c566927feedf3996

  • SSDEEP

    393216:8YgkRhym1POju9nwSQXqbsB5+qZa4ypIBogxm28T6IeC/fwqijN:jPRhyc9nwSKpaLpIDxm28un

Score
9/10

Malware Config

Signatures

  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-09_174d3e8f059a95f601abb71d8bf91db0_magniber.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-09_174d3e8f059a95f601abb71d8bf91db0_magniber.exe"
    1⤵
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    PID:4496

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4496-8-0x0000000003090000-0x0000000003091000-memory.dmp

          Filesize

          4KB

        • memory/4496-15-0x0000000003090000-0x0000000003091000-memory.dmp

          Filesize

          4KB