Overview
overview
10Static
static
10magik remake.rar
windows11-21h2-x64
3magik rema....vsidx
windows11-21h2-x64
3magik rema....vsidx
windows11-21h2-x64
3magik rema...7/.suo
windows11-21h2-x64
3magik rema...p.json
windows11-21h2-x64
3magik rema...t.json
windows11-21h2-x64
3magik rema...p2.sln
windows11-21h2-x64
3magik rema...e.json
windows11-21h2-x64
3magik rema...config
windows11-21h2-x64
3magik rema...ner.cs
windows11-21h2-x64
3magik rema...rm1.cs
windows11-21h2-x64
3magik rema...m1.vbs
windows11-21h2-x64
1magik rema...ner.cs
windows11-21h2-x64
3magik rema...rm2.cs
windows11-21h2-x64
3magik rema...m2.vbs
windows11-21h2-x64
1magik rema...ner.cs
windows11-21h2-x64
3magik rema...m4.vbs
windows11-21h2-x64
1magik rema...er.vbs
windows11-21h2-x64
1magik rema...es.vbs
windows11-21h2-x64
1magik rema...I2.dll
windows11-21h2-x64
1magik rema...UI.dll
windows11-21h2-x64
1magik rema...p2.exe
windows11-21h2-x64
10magik rema...cs.dll
windows11-21h2-x64
1magik rema...p2.exe
windows11-21h2-x64
3magik rema...I2.dll
windows11-21h2-x64
1magik rema...I2.dll
windows11-21h2-x64
1magik rema...I2.dll
windows11-21h2-x64
1magik rema...I2.dll
windows11-21h2-x64
1magik rema...I2.dll
windows11-21h2-x64
1magik rema...I2.dll
windows11-21h2-x64
1magik rema...I2.dll
windows11-21h2-x64
1magik rema...I2.dll
windows11-21h2-x64
1Analysis
-
max time kernel
30s -
max time network
144s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
02/09/2024, 07:29
Behavioral task
behavioral1
Sample
magik remake.rar
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
magik remake/.vs/WindowsFormsApp2/FileContentIndex/bbcfc6bb-cd18-4b63-9c13-bf9271aa79e7.vsidx
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
magik remake/.vs/WindowsFormsApp2/FileContentIndex/dd5ae10a-f103-4e06-adf0-26a038b47d16.vsidx
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
magik remake/.vs/WindowsFormsApp2/v17/.suo
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
magik remake/.vs/WindowsFormsApp2/v17/DocumentLayout.backup.json
Resource
win11-20240802-en
Behavioral task
behavioral6
Sample
magik remake/.vs/WindowsFormsApp2/v17/DocumentLayout.json
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
magik remake/WindowsFormsApp2.sln
Resource
win11-20240802-en
Behavioral task
behavioral8
Sample
magik remake/WindowsFormsApp2/.vs/WindowsFormsApp2.csproj.dtbcache.json
Resource
win11-20240802-en
Behavioral task
behavioral9
Sample
magik remake/WindowsFormsApp2/App.config
Resource
win11-20240802-en
Behavioral task
behavioral10
Sample
magik remake/WindowsFormsApp2/Form1.Designer.cs
Resource
win11-20240802-en
Behavioral task
behavioral11
Sample
magik remake/WindowsFormsApp2/Form1.cs
Resource
win11-20240802-en
Behavioral task
behavioral12
Sample
magik remake/WindowsFormsApp2/Form1.vbs
Resource
win11-20240802-en
Behavioral task
behavioral13
Sample
magik remake/WindowsFormsApp2/Form2.Designer.cs
Resource
win11-20240802-en
Behavioral task
behavioral14
Sample
magik remake/WindowsFormsApp2/Form2.cs
Resource
win11-20240802-en
Behavioral task
behavioral15
Sample
magik remake/WindowsFormsApp2/Form2.vbs
Resource
win11-20240802-en
Behavioral task
behavioral16
Sample
magik remake/WindowsFormsApp2/Form4.Designer.cs
Resource
win11-20240802-en
Behavioral task
behavioral17
Sample
magik remake/WindowsFormsApp2/Form4.vbs
Resource
win11-20240802-en
Behavioral task
behavioral18
Sample
magik remake/WindowsFormsApp2/Properties/Resources.Designer.vbs
Resource
win11-20240802-en
Behavioral task
behavioral19
Sample
magik remake/WindowsFormsApp2/Properties/Resources.vbs
Resource
win11-20240802-en
Behavioral task
behavioral20
Sample
magik remake/WindowsFormsApp2/bin/Debug/Guna.UI2.dll
Resource
win11-20240802-en
Behavioral task
behavioral21
Sample
magik remake/WindowsFormsApp2/bin/Debug/Siticone.UI.dll
Resource
win11-20240802-en
Behavioral task
behavioral22
Sample
magik remake/WindowsFormsApp2/bin/Debug/WindowsFormsApp2.exe
Resource
win11-20240802-en
Behavioral task
behavioral23
Sample
magik remake/WindowsFormsApp2/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
Resource
win11-20240802-en
Behavioral task
behavioral24
Sample
magik remake/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.exe
Resource
win11-20240802-en
Behavioral task
behavioral25
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net40/Guna.UI2.dll
Resource
win11-20240802-en
Behavioral task
behavioral26
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net45/Guna.UI2.dll
Resource
win11-20240802-en
Behavioral task
behavioral27
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net461/Guna.UI2.dll
Resource
win11-20240802-en
Behavioral task
behavioral28
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net472/Guna.UI2.dll
Resource
win11-20240802-en
Behavioral task
behavioral29
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net48/Guna.UI2.dll
Resource
win11-20240802-en
Behavioral task
behavioral30
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net6.0-windows7.0/Guna.UI2.dll
Resource
win11-20240802-en
Behavioral task
behavioral31
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/net7.0-windows7.0/Guna.UI2.dll
Resource
win11-20240802-en
Behavioral task
behavioral32
Sample
magik remake/packages/Guna.UI2.WinForms.2.0.4.6/lib/netcoreapp3.1/Guna.UI2.dll
Resource
win11-20240802-en
General
-
Target
magik remake.rar
-
Size
15.3MB
-
MD5
b08efa619b07842b51cfe9b2e8ddc510
-
SHA1
d0ecffd729713d180e17a6e22c9ffae17d619783
-
SHA256
4cc9f872ca745f98ff2755933aba8d84ca7233d53381799ba2e388c085664e6f
-
SHA512
61620d3618228a77b3cdecb3321ad3edd3e930697634d8ce89ef8966d95041ea31e29c11ef11b8de434fe292762494e3156100a91530981ac2aaedce28032774
-
SSDEEP
393216:y666+4LLq9EwVfAJOh34mZujhy/D+O/sJs3iT:RRq9d5AchImZBaSsEiT
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1287768749-810021449-2672985988-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1287768749-810021449-2672985988-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1136 OpenWith.exe