Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24-06-2024 18:36
Behavioral task
behavioral1
Sample
2024-06-24_70e0565d42927edf9fd5446c4efdc3b4_magniber.exe
Resource
win7-20240221-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-24_70e0565d42927edf9fd5446c4efdc3b4_magniber.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
2024-06-24_70e0565d42927edf9fd5446c4efdc3b4_magniber.exe
-
Size
4.2MB
-
MD5
70e0565d42927edf9fd5446c4efdc3b4
-
SHA1
19aa0b804b3906fad31e43a5803f74e4bb26e7a5
-
SHA256
821b7a1604dbe35ca3e2e089b955b8a42225282b74828c3f8af22d9fd05d7ff8
-
SHA512
04da3b6e577a53e9ac68a36185e584ccd9bfc7c119aab4ab16cdb82ed924f77c3a741958f97dfa963153c3c12bbc1187acb2ca9c8dffe53c88f7b1fa35b7ba4b
-
SSDEEP
98304:JoKa4Xp2t2HvKkU6dfdLkkSGCVUkK9Ci58RMYMXKMSolV3:JoKfPPKkKXVUkK9RS+H3
Score
10/10
Malware Config
Signatures
-
Detects HijackLoader (aka IDAT Loader) 1 IoCs
resource yara_rule behavioral1/memory/2212-0-0x0000000000400000-0x00000000008B6000-memory.dmp family_hijackloader -
HijackLoader
HijackLoader is a multistage loader first seen in 2023.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2212 2024-06-24_70e0565d42927edf9fd5446c4efdc3b4_magniber.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2212 2024-06-24_70e0565d42927edf9fd5446c4efdc3b4_magniber.exe 2212 2024-06-24_70e0565d42927edf9fd5446c4efdc3b4_magniber.exe