General

  • Target

    2024-07-03_bf07f7fb52f00bb1e5d170c5377fcbff_magniber

  • Size

    10.0MB

  • Sample

    240703-n3ktdasbng

  • MD5

    bf07f7fb52f00bb1e5d170c5377fcbff

  • SHA1

    29ce5e56c455c6d2e206660de97ee2929d3635e6

  • SHA256

    3878a0e50206a6d660b7234483c9d79c8db99c23d2fc281f09435bee25edd577

  • SHA512

    9127b7926014f0482dbdc70df5b58fb1106312a2b307de00f911a880d7fc6cdc5c18cb5ce45626c539bc92e5250325ea1017b3a913dd50e3eeffced1aba2c45e

  • SSDEEP

    98304:lBbQ2H/oEMjghbO76uAqrngBNXsH7zMdDwPgQcM3qn8V/cwduNJKf+tLN9Lxy:PRf/JTNXsH7z0DwPgdvwduGf6HL

Malware Config

Targets

    • Target

      2024-07-03_bf07f7fb52f00bb1e5d170c5377fcbff_magniber

    • Size

      10.0MB

    • MD5

      bf07f7fb52f00bb1e5d170c5377fcbff

    • SHA1

      29ce5e56c455c6d2e206660de97ee2929d3635e6

    • SHA256

      3878a0e50206a6d660b7234483c9d79c8db99c23d2fc281f09435bee25edd577

    • SHA512

      9127b7926014f0482dbdc70df5b58fb1106312a2b307de00f911a880d7fc6cdc5c18cb5ce45626c539bc92e5250325ea1017b3a913dd50e3eeffced1aba2c45e

    • SSDEEP

      98304:lBbQ2H/oEMjghbO76uAqrngBNXsH7zMdDwPgQcM3qn8V/cwduNJKf+tLN9Lxy:PRf/JTNXsH7z0DwPgdvwduGf6HL

    • RisePro

      RisePro stealer is an infostealer distributed by PrivateLoader.

    • Adds Run key to start application

    • Suspicious use of NtCreateThreadExHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks