7569e0961ab54751f0921cf2a0f92ba5b31edcbe86becc36f6a527edfaaeae96

Analysis

max time kernel
51s
max time network
53s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2024, 15:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2024-06-12_8a7685e8121db725e823f9bf1eb20ae8_magniber.exe
Size 1.3MB
Sample240612-sgcyvstblm
SHA256 7569e0961ab54751f0921cf2a0f92ba5b31edcbe86becc36f6a527edfaaeae96
MD5 8a7685e8121db725e823f9bf1eb20ae8
SHA1 2738962686729e48d38d3cbde7a810a49bd1b220
SHA512 3d61942b222036af03a75b4163d10ccc21e99412a5c45c42ffc4fa90719ca7b17466a30f853a25ce379c02a21e5add653cd8da5e0a9eecea5c48593da2a1e65e
SSDEEP 24576:Icyvw2M/r6mEusqK01BooooEbiiIHBlPa1GJdO+eUBP1S14e4ZP4NDe:IhOrzE6ooooECK1GJdO+eiP1SOe4mNDe
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

bootkit persistence

Malware Config

Signatures

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	2024-06-12_8a7685e8121db725e823f9bf1eb20ae8_magniber.exe

C:\Users\Admin\AppData\Local\Temp\2024-06-12_8a7685e8121db725e823f9bf1eb20ae8_magniber.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-12_8a7685e8121db725e823f9bf1eb20ae8_magniber.exe"
1⤵
- Writes to the Master Boot Record (MBR)
PID:2968

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads