Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-09-2024 06:25
General
-
Target
2024-09-19_4d782f275df6dbab2d37808afa65fe71_magniber.exe
-
Size
5.4MB
-
MD5
4d782f275df6dbab2d37808afa65fe71
-
SHA1
0648d295cb9df08947c1192fc6be23c1d72c2275
-
SHA256
faa74361a18529971cc286d26343bba3a5d4fdee99fc461a4d26b0ec5fec42cf
-
SHA512
5516b1939d6b9b4835514b939305f48508d0ead8acc42050c4bb9057dbe4d8acd4401a6771d78c36932a3214997b92e8ed49301258d7684b88099d390dd8b664
-
SSDEEP
98304:70Ocn0xMTpKZKzRm0fxK2I94pXGOU8ybq5utbATwY2hlOt2vXtZ:70lKuppfs4pVUjt0TWlNX
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Checks system information in the registry 2 TTPs 2 IoCs
System information is often read in order to detect sandboxing environments.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-19_4d782f275df6dbab2d37808afa65fe71_magniber.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-19_4d782f275df6dbab2d37808afa65fe71_magniber.exe"1⤵
- Checks computer location settings
- Checks system information in the registry
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.5MB
-
Filesize
5.5MB