General

  • Target

    2024-09-19_4d782f275df6dbab2d37808afa65fe71_magniber

  • Size

    5.4MB

  • Sample

    240919-g6n7msvdnc

  • MD5

    4d782f275df6dbab2d37808afa65fe71

  • SHA1

    0648d295cb9df08947c1192fc6be23c1d72c2275

  • SHA256

    faa74361a18529971cc286d26343bba3a5d4fdee99fc461a4d26b0ec5fec42cf

  • SHA512

    5516b1939d6b9b4835514b939305f48508d0ead8acc42050c4bb9057dbe4d8acd4401a6771d78c36932a3214997b92e8ed49301258d7684b88099d390dd8b664

  • SSDEEP

    98304:70Ocn0xMTpKZKzRm0fxK2I94pXGOU8ybq5utbATwY2hlOt2vXtZ:70lKuppfs4pVUjt0TWlNX

Malware Config

Targets

    • Target

      2024-09-19_4d782f275df6dbab2d37808afa65fe71_magniber

    • Size

      5.4MB

    • MD5

      4d782f275df6dbab2d37808afa65fe71

    • SHA1

      0648d295cb9df08947c1192fc6be23c1d72c2275

    • SHA256

      faa74361a18529971cc286d26343bba3a5d4fdee99fc461a4d26b0ec5fec42cf

    • SHA512

      5516b1939d6b9b4835514b939305f48508d0ead8acc42050c4bb9057dbe4d8acd4401a6771d78c36932a3214997b92e8ed49301258d7684b88099d390dd8b664

    • SSDEEP

      98304:70Ocn0xMTpKZKzRm0fxK2I94pXGOU8ybq5utbATwY2hlOt2vXtZ:70lKuppfs4pVUjt0TWlNX

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks