General

  • Target

    2024-11-21_4c16d3e42fe3f4ababc99fb1534c99fe_magniber

  • Size

    2.3MB

  • Sample

    241121-nkhaja1rcs

  • MD5

    4c16d3e42fe3f4ababc99fb1534c99fe

  • SHA1

    a4866c4d8ac63a4fa28102649116ca16cb5b9be5

  • SHA256

    471dc7c9947cb150d2e8b8c8e264dc397c8d7c9d4c163e10ded37df8d10224bc

  • SHA512

    ad9cd4074d325d8491274b8887c6313e1540f7e3f910789388e6c99db7b28a1fad38e0106482d2cba778a35c07b4647b7a0fe2ff8e7f8441539e5a1f29dabeb1

  • SSDEEP

    49152:218Ezlgpp7oNB89z0lDyLYMCFIZBCYNIjPnRPGwp6ZU6CENlc7dpJLrQWd:2eER/bIZBCGWRPNp69CEN6rV

Malware Config

Targets

    • Target

      2024-11-21_4c16d3e42fe3f4ababc99fb1534c99fe_magniber

    • Size

      2.3MB

    • MD5

      4c16d3e42fe3f4ababc99fb1534c99fe

    • SHA1

      a4866c4d8ac63a4fa28102649116ca16cb5b9be5

    • SHA256

      471dc7c9947cb150d2e8b8c8e264dc397c8d7c9d4c163e10ded37df8d10224bc

    • SHA512

      ad9cd4074d325d8491274b8887c6313e1540f7e3f910789388e6c99db7b28a1fad38e0106482d2cba778a35c07b4647b7a0fe2ff8e7f8441539e5a1f29dabeb1

    • SSDEEP

      49152:218Ezlgpp7oNB89z0lDyLYMCFIZBCYNIjPnRPGwp6ZU6CENlc7dpJLrQWd:2eER/bIZBCGWRPNp69CEN6rV

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks