Analysis
-
max time kernel
94s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
06/09/2024, 09:57
General
-
Target
2024-09-06_8ee8461312fbe1b8ff69255f11de13aa_hijackloader_magniber.exe
-
Size
12.2MB
-
MD5
8ee8461312fbe1b8ff69255f11de13aa
-
SHA1
9c370394ec1c171e792446093055a5b213bcaf2a
-
SHA256
c8032f96e56221774ba2affb43c803b6af3ff3931826b7c64a2035ad21be45c7
-
SHA512
ab266d3c181d0ebbd386f87e68b200d216a1e5e36f735311850697531cc5735b6ec59b5aeb894aa6a8ad0d0b5217026801cf80ee21b6f216f1b4b8b4067d24f8
-
SSDEEP
196608:QbJRocy8nfhgzI2Mofx6flJivh6nqrnY1h4ga9BvqQbsNrqNv2R7oZ:Q9Q8n0I2Tvh6grgaXr4rqNmy
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies registry class 3 IoCs
-
Modifies system certificate store 2 TTPs 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-06_8ee8461312fbe1b8ff69255f11de13aa_hijackloader_magniber.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-06_8ee8461312fbe1b8ff69255f11de13aa_hijackloader_magniber.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx