General

  • Target

    2024-10-26_d5c8e02ae89291f7124be813136aafeb_magniber

  • Size

    13.0MB

  • Sample

    241026-ctp6yszapq

  • MD5

    d5c8e02ae89291f7124be813136aafeb

  • SHA1

    01c7c9edab95208062cb018fda5ac2bf0483bdef

  • SHA256

    29dd77f0013ecbb29bd195d3b35b41d8e684e9044aff886373babf5b8f70fc9b

  • SHA512

    be18a14f6d2615ae25640e52e961986810d0c135db3a27dfbf894dd78b5d34583eded9d90f9f26d322143860ce3bd597054c122126c9b2d39e73bc24a0df9a55

  • SSDEEP

    196608:7ppYohz43D+vplN8OrfaV+1PbmKaqPQw0uLEW1:7ppYYz43DcC8VbiqIw0uIW1

Malware Config

Targets

    • Target

      2024-10-26_d5c8e02ae89291f7124be813136aafeb_magniber

    • Size

      13.0MB

    • MD5

      d5c8e02ae89291f7124be813136aafeb

    • SHA1

      01c7c9edab95208062cb018fda5ac2bf0483bdef

    • SHA256

      29dd77f0013ecbb29bd195d3b35b41d8e684e9044aff886373babf5b8f70fc9b

    • SHA512

      be18a14f6d2615ae25640e52e961986810d0c135db3a27dfbf894dd78b5d34583eded9d90f9f26d322143860ce3bd597054c122126c9b2d39e73bc24a0df9a55

    • SSDEEP

      196608:7ppYohz43D+vplN8OrfaV+1PbmKaqPQw0uLEW1:7ppYYz43DcC8VbiqIw0uIW1

    • Detects HijackLoader (aka IDAT Loader)

    • HijackLoader

      HijackLoader is a multistage loader first seen in 2023.

    • Hijackloader family

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks