592df48a801210a7b064e14aa4d1dedb6c8dfccf4ab6d9dd2754d88b2199392a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-25_6ac728e7717c0a7b8c1f0c0943bde68b_magniber
Size

9.4MB
Sample

240925-hpf1datgrc
MD5

6ac728e7717c0a7b8c1f0c0943bde68b
SHA1

ec11ab598f9b318e2679b0e2af83fee34744277b
SHA256

592df48a801210a7b064e14aa4d1dedb6c8dfccf4ab6d9dd2754d88b2199392a
SHA512

5953fb4204a45069095a1f1260ffb0b49203c89fcc4d3c8d221258f196768db05bcae1ff252e9c30183a9046225f1004d24450a1dc13d94ce3e1bd791a87fa62
SSDEEP

196608:X78cEXTRiA3JjtvqiAxhv9sg1tKCTpYAQEWrqufezvGWUJV:XocYRiIt07vJYZEW2uGz+WUJV

Score

6^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  2024-09-25_6ac728e7717c0a7b8c1f0c0943bde68b_magniber
- Size
  
  9.4MB
- MD5
  
  6ac728e7717c0a7b8c1f0c0943bde68b
- SHA1
  
  ec11ab598f9b318e2679b0e2af83fee34744277b
- SHA256
  
  592df48a801210a7b064e14aa4d1dedb6c8dfccf4ab6d9dd2754d88b2199392a
- SHA512
  
  5953fb4204a45069095a1f1260ffb0b49203c89fcc4d3c8d221258f196768db05bcae1ff252e9c30183a9046225f1004d24450a1dc13d94ce3e1bd791a87fa62
- SSDEEP
  
  196608:X78cEXTRiA3JjtvqiAxhv9sg1tKCTpYAQEWrqufezvGWUJV:XocYRiIt07vJYZEW2uGz+WUJV
Score

6^/10

discovery spyware stealer
- Blocklisted process makes network request
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer