Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
16/06/2024, 04:46
General
-
Target
2024-06-16_b2aa8fe98b53f95926a6872e4eeb6d46_magniber.exe
-
Size
1.4MB
-
MD5
b2aa8fe98b53f95926a6872e4eeb6d46
-
SHA1
1301752b3e98fa4654767c884b6f8bb6995334bd
-
SHA256
0bdd186f90f7c3e15dc0dcb593db7b20a1e21b38974e8b9ed837732a19daa36d
-
SHA512
eb3c28e04729ae13e422df9a38a3ed15e7d2173250122bdc559864fa81a4e7f09a87b28806148c60ce58d040bd19e855827b83c2aaade4f098995886165c7275
-
SSDEEP
24576:mqM0QHRzf+BooooEJ8GYgqGneBPuzBCxxAih0lhSMXlhe94e4MCkAYt:u0Oz2BooooEJsgmPmBCxG/k2e4WAYt
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-16_b2aa8fe98b53f95926a6872e4eeb6d46_magniber.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-16_b2aa8fe98b53f95926a6872e4eeb6d46_magniber.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious use of FindShellTrayWindow