Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17-08-2024 10:21
General
-
Target
2024-08-17_d9ad858356a798e2462d7495f3e12555_hijackloader_magniber.exe
-
Size
11.4MB
-
MD5
d9ad858356a798e2462d7495f3e12555
-
SHA1
3b6f938bfbc47d158ab4d519061146c45ab04f4a
-
SHA256
d92dbfc2bfaca678c6e3b480cce9d7f05d35b7b6a954a08137f9b5d6fc618b03
-
SHA512
abb7f93a36772218bfc6d2c88af975e7665c9329580007480c56369aa4f01a2d251db7c5e4e4bfa77709e280b832b4117a47f1508b1053342515921a03b8dfa7
-
SSDEEP
196608:tJYeZgW7MNzvX/nhOQGpINfdtajEhVsmtyBOpg9ev4RsBkrqNs2RKChw:tys7gbXZNfdf0mtyBOpGeQR9rqNcChw
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies registry class 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-17_d9ad858356a798e2462d7495f3e12555_hijackloader_magniber.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-17_d9ad858356a798e2462d7495f3e12555_hijackloader_magniber.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx