2024-07-10_672fbf5767fd811b919443c84117a045_magniber

Sharing

Copy URL Twitter E-mail

General

Target
2024-07-10_672fbf5767fd811b919443c84117a045_magniber
Size 61.3MB
Sample240710-varjsaydkn
SHA256 2f350dbedc830c00c5058d7389bea3e212739f65cffedede14e7c6322da0442e
MD5 672fbf5767fd811b919443c84117a045
SHA1 e915488633007fccf06e9141d01b008110c2ca2b
SHA512 47c630174b0fbe07d9452d23d8dee3d04d87c9999b666a8b15f014a37d890bf454511b72a52b46a7389323185272c3c277537221daa7bfb2ae320729b0d51817
SSDEEP 1572864:USSsOG1MZrPE+yqPONDf3/1FGipBeowfrnjD62hHLCd/5H:6GqZzE2OZv1FGiDerTXF9O3
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

2024-07-10_672fbf5767fd811b919443c84117a045_magniber

.exe 61.3MB

2024-07-10_672fbf5767fd811b919443c84117a045_magniber

IMPHASH 632f939005ccaa4d7643b0a302c14333
SHA256 2f350dbedc830c00c5058d7389bea3e212739f65cffedede14e7c6322da0442e
MD5 672fbf5767fd811b919443c84117a045
SHA1 e915488633007fccf06e9141d01b008110c2ca2b
SHA512 47c630174b0fbe07d9452d23d8dee3d04d87c9999b666a8b15f014a37d890bf454511b72a52b46a7389323185272c3c277537221daa7bfb2ae320729b0d51817
SSDEEP 1572864:USSsOG1MZrPE+yqPONDf3/1FGipBeowfrnjD62hHLCd/5H:6GqZzE2OZv1FGiDerTXF9O3
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

ff:51:fb:96:6f:80:86:22:92:59:9c:20:e1:17:b2:42:a2:8b:cc:b0:d6:92:8d:dc:84:fc:95:26:19:bc:50:b9

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Open Source Developer\, Dimitry Polivaev,O=Open Source Developer,L=Munich,C=DE,1.2.840.113549.1.9.1=#0c1564696d697472794066726565706c616e652e6f7267

Chains

Sep 24, 2023

CN=Open Source Developer\, Dimitry Polivaev,O=Open Source Developer,L=Munich,C=DE,1.2.840.113549.1.9.1=#0c1564696d697472794066726565706c616e652e6f7267

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Open Source Developer\, Dimitry Polivaev,O=Open Source Developer,L=Munich,C=DE,1.2.840.113549.1.9.1=#0c1564696d697472794066726565706c616e652e6f7267

Serial Number

6d:59:d7:1c:2a:65:ba:86:92:4d:4b:37:87:c8:55:55

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 31, 2022 - Oct 31, 2023

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Serial Number

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 28, 2022 - Jul 27, 2033

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 31, 2021 - Sep 17, 2029

Minor OS version

Major OS version

Entry point

132959

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\git-sdk-64\usr\src\MSYS2-packages\p7zip\src\p7zip_16.02.bup\CPP\7zip\Bundles\SFXSetup\ReleaseD\7zSD.pdb

kernel32

VirtualAlloc VirtualFree GetVersionExA GetSystemDirectoryW GetModuleHandleA GetProcAddress LoadLibraryExW lstrcatW lstrlenW CloseHandle GetLastError InitializeCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateEventA CreateSemaphoreA AreFileApisANSI MultiByteToWideChar WideCharToMultiByte FreeLibrary GetModuleFileNameA GetModuleFileNameW LoadLibraryExA LoadLibraryA LoadLibraryW LocalFree FormatMessageA FormatMessageW SetCurrentDirectoryA SetCurrentDirectoryW GetCurrentDirectoryA GetCurrentDirectoryW CreateDirectoryA CreateDirectoryW CreateFileW DeleteFileA DeleteFileW RemoveDirectoryA RemoveDirectoryW SetFileAttributesA SetFileAttributesW SetFileTime GetTempPathW SetLastError GetCurrentProcessId GetCurrentThreadId GetTickCount GetSystemDirectoryA GetWindowsDirectoryA GetWindowsDirectoryW GetModuleHandleW GetTempPathA MoveFileA MoveFileW FindClose FindCloseChangeNotification FindFirstChangeNotificationA FindFirstChangeNotificationW FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW GetFileAttributesA GetFileAttributesW GetLogicalDriveStringsW GetLogicalDriveStringsA CreateFileA GetFileSize ReadFile SetEndOfFile SetFilePointer WriteFile CompareFileTime EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetStdHandle GetFileInformationByHandle WaitForMultipleObjects Sleep GetCommandLineW CreateProcessA WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapSize SetConsoleCtrlHandler GetProcessHeap GetStringTypeW GetFileType SetStdHandle SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage DecodePointer FindFirstFileExW FindFirstFileExA WaitForSingleObjectEx OutputDebugStringW OutputDebugStringA HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW GetCurrentThread HeapAlloc HeapFree GetACP ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ResumeThread ExitThread CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount InterlockedFlushSList InterlockedPushEntrySList EncodePointer RaiseException RtlUnwind GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent

user32

CharUpperA ShowWindow CharUpperW DestroyWindow LoadIconA KillTimer SetTimer PostMessageA InvalidateRect GetDC DrawTextW EndDialog MessageBoxW CharPrevExA GetWindowTextLengthW GetWindowTextLengthA GetWindowTextW GetWindowTextA SetWindowTextW SetWindowTextA CreateWindowExW CreateWindowExA RegisterClassW RegisterClassA SendMessageA LoadStringW LoadStringA SystemParametersInfoA MapDialogRect SetWindowLongA GetWindowLongA ScreenToClient GetWindowRect GetDialogBaseUnits GetDlgItem DialogBoxParamW DialogBoxParamA CreateDialogParamW CreateDialogParamA MoveWindow SendMessageW

shell32

DragQueryFileW DragFinish DragQueryFileA ShellExecuteExA SHBrowseForFolderA SHGetPathFromIDListA SHGetMalloc

ole32

CoInitialize CoUninitialize

oleaut32

VariantCopy VariantClear SysAllocStringLen SysAllocString SysStringLen

Sharing

General

Malware Config

Signatures

File Explorer

2024-07-10_672fbf5767fd811b919443c84117a045_magniber

PE Signature issue

kernel32

user32

shell32

ole32

oleaut32

generic