Analysis
-
max time kernel
142s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
10-07-2024 23:44
General
-
Target
2024-07-10_8475897ae4c0384b769d7c0d349a4faa_magniber.exe
-
Size
13.6MB
-
MD5
8475897ae4c0384b769d7c0d349a4faa
-
SHA1
533afbca40b0ba2c3650bcc6f0f52c28fb0c0002
-
SHA256
bde9a97dc10c091d43336566a29049d2ec89a96d1c5adec916923079ae3ea438
-
SHA512
8dac5e2010e0bb6be5ea213a3c422a095ed3fb96b55b0bfca4e6c4af5a82d8ccbc08f4517764ea7ccec6857fdd3e3ead7568566a6c03c84cbc9cda8ab4251fa6
-
SSDEEP
393216:doR107ERK2bn8WeXIBqdJymosApDQ9a2XKkJF1OS:6Kwna4QrosApDgUkJFQS
Malware Config
Signatures
-
Banload
Banload variants download malicious files, then install and execute the files.
-
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 9 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-10_8475897ae4c0384b769d7c0d349a4faa_magniber.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-10_8475897ae4c0384b769d7c0d349a4faa_magniber.exe"1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12B
MD5e4a1661c2c886ebb688dec494532431c
SHA1a2ae2a7db83b33dc95396607258f553114c9183c
SHA256b76875c50ef704dbbf7f02c982445971d1bbd61aebe2e4b28ddc58a1d66317d5
SHA512efdcb76fb40482bc94e37eae3701e844bf22c7d74d53aef93ac7b6ae1c1094ba2f853875d2c66a49a7075ea8c69f5a348b786d6ee0fa711669279d04adaac22c
-
Filesize
48.6MB
-
Filesize
48.6MB
-
Filesize
48.6MB
-
Filesize
48.6MB
-
Filesize
48.6MB
-
Filesize
2.0MB
-
Filesize
48.6MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
48.6MB
-
Filesize
48.6MB
-
Filesize
48.6MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
48.6MB
-
Filesize
2.0MB
-
Filesize
48.6MB
-
Filesize
48.6MB