Analysis
-
max time kernel
51s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
20-06-2024 13:03
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-20_21df08178816cea3a95c3a4473a5fff2_magniber.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-06-20_21df08178816cea3a95c3a4473a5fff2_magniber.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-20_21df08178816cea3a95c3a4473a5fff2_magniber.exe
-
Size
4.4MB
-
MD5
21df08178816cea3a95c3a4473a5fff2
-
SHA1
45ee32ed8fea9b35134d91f8102d7abacf323e25
-
SHA256
0bd2a6df9317e07f43518d53702c6c47a733291ae5e123130fbde88e0c7a29c2
-
SHA512
8b99ae8085a6a8c74cd89b335972faf4cfe87acc30e12d5d07e6abfa7f6c7ac275d48014ee1696d6d83d56522afbb04c4ba66fb61f1552441238ea0d1da99eeb
-
SSDEEP
98304:tYEf12dI4ARAsWHqhUjONAYcLoBOp/kxTpWMwDtqp87lNZSocIR:td12dI4ARAsWHqhUjONAYcLoBOp/M0Ma
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 2024-06-20_21df08178816cea3a95c3a4473a5fff2_magniber.exe -
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 2024-06-20_21df08178816cea3a95c3a4473a5fff2_magniber.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz 2024-06-20_21df08178816cea3a95c3a4473a5fff2_magniber.exe