Analysis
-
max time kernel
134s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17/08/2024, 10:43
General
-
Target
2024-08-17_195721602e220f9046b79b39f4cd0fd7_hijackloader_magniber.exe
-
Size
11.4MB
-
MD5
195721602e220f9046b79b39f4cd0fd7
-
SHA1
5e64d301e86ccecb2386805a43b998da3853152d
-
SHA256
60b84ec2a8b74b4cb7e0bda25337dd52fedbc6f03e79220f81c21411e9bb41be
-
SHA512
fb295fedeacf0e5573c023f94c1ddf55e51b608a3257d4b3e22d1ee7fb9b361a4433f6efeeb4dd9c3212f251517481fff953aae054726adbc2a4bbb2179d9963
-
SSDEEP
196608:MJYeZgW7MNzvX/nhOQGpINfdtajEhVsmtyBOpg9ev4RsBkrqN32RK6h2:Mys7gbXZNfdf0mtyBOpGeQR9rqNv6h2
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies registry class 3 IoCs
-
Modifies system certificate store 2 TTPs 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-17_195721602e220f9046b79b39f4cd0fd7_hijackloader_magniber.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-17_195721602e220f9046b79b39f4cd0fd7_hijackloader_magniber.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx