Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
24-11-2024 18:36
General
-
Target
2024-11-24_9a02e1fb0b24aa156e0c95f4448624ac_luca-stealer_magniber.exe
-
Size
6.4MB
-
MD5
9a02e1fb0b24aa156e0c95f4448624ac
-
SHA1
1f893a978094c636278c1328023eeccc3bc4572d
-
SHA256
2ec2d73b605055d12f896cd1f179872cfe71b2f8befbcac215b64af38fbbb240
-
SHA512
e50c8464eb2ffa53f05aa493e41bf3a17e3b245efc8d984110507e8c700a173f2ac59fee5e40148bcc003e474d5b1c442a52bd08d6b5d103ab6895a811baf9ea
-
SSDEEP
196608:iRkhrGgZHOg3bjEBh8VMxP3CPyPaE7a4A:JlHKxPCPCaE7a4A
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-24_9a02e1fb0b24aa156e0c95f4448624ac_luca-stealer_magniber.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-24_9a02e1fb0b24aa156e0c95f4448624ac_luca-stealer_magniber.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx