Overview

overview

7

Static

static

3

2024-08-07...er.exe

windows7-x64

7

2024-08-07...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-07_01bf53b04ec2b317ac0ce374747fa249_mafia_magniber

  • Size

    545KB

  • Sample

    240807-g4bhrstbnn

  • MD5

    01bf53b04ec2b317ac0ce374747fa249

  • SHA1

    dd39acdc2dd60b2f368d2ed12795af22cff107f8

  • SHA256

    7c46cbe01e45ad3a89a0e89dbdd74be09710e4be95bdd8f018fb63ccda2e90ef

  • SHA512

    d94cc20853e8034e709150db030b72aa7a7fd9803e1baf489057cd527eaaf54d1c50f7dbbb911b8e1bb874f527957e58a9df2b4c2eec5c435f6062dcb958d8b4

  • SSDEEP

    12288:x2+p3SIH+iX7azL0ZK0GY+HCigMxYjBtlhboZn/9arBOIo:x2E3SIeuazYZ8PCnYY1tlhbGnUEIo

Score
7/10
discovery

Malware Config

Targets

    • Target

      2024-08-07_01bf53b04ec2b317ac0ce374747fa249_mafia_magniber

    • Size

      545KB

    • MD5

      01bf53b04ec2b317ac0ce374747fa249

    • SHA1

      dd39acdc2dd60b2f368d2ed12795af22cff107f8

    • SHA256

      7c46cbe01e45ad3a89a0e89dbdd74be09710e4be95bdd8f018fb63ccda2e90ef

    • SHA512

      d94cc20853e8034e709150db030b72aa7a7fd9803e1baf489057cd527eaaf54d1c50f7dbbb911b8e1bb874f527957e58a9df2b4c2eec5c435f6062dcb958d8b4

    • SSDEEP

      12288:x2+p3SIH+iX7azL0ZK0GY+HCigMxYjBtlhboZn/9arBOIo:x2E3SIeuazYZ8PCnYY1tlhbGnUEIo

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks