General

  • Target

    2025-01-03_3b9fbb9abc5e519aa8f9eab227cbdb51_luca-stealer_magniber

  • Size

    13.0MB

  • Sample

    250103-mhvbmsymcs

  • MD5

    3b9fbb9abc5e519aa8f9eab227cbdb51

  • SHA1

    62928091c2741719300bb01c9644a8a63ec970bb

  • SHA256

    5c14c7f4bccd268a00148a55e024c9e1a34a9a8706646a517aa9aa7484003270

  • SHA512

    8d996af3e8e1e0857072496c42051f77ce49892faa650af1d931d4e46fc9ec78602fd7141c4ef58f0644d2940581d749991086d189441a476839e2155c8fa890

  • SSDEEP

    196608:2ppYohz43D+vplN8OrfaV+1PbmKSqPp0gtEg2DEW1:2ppYYz43DcC8VbqqRKg2gW1

Malware Config

Targets

    • Target

      2025-01-03_3b9fbb9abc5e519aa8f9eab227cbdb51_luca-stealer_magniber

    • Size

      13.0MB

    • MD5

      3b9fbb9abc5e519aa8f9eab227cbdb51

    • SHA1

      62928091c2741719300bb01c9644a8a63ec970bb

    • SHA256

      5c14c7f4bccd268a00148a55e024c9e1a34a9a8706646a517aa9aa7484003270

    • SHA512

      8d996af3e8e1e0857072496c42051f77ce49892faa650af1d931d4e46fc9ec78602fd7141c4ef58f0644d2940581d749991086d189441a476839e2155c8fa890

    • SSDEEP

      196608:2ppYohz43D+vplN8OrfaV+1PbmKSqPp0gtEg2DEW1:2ppYYz43DcC8VbqqRKg2gW1

    • Detects HijackLoader (aka IDAT Loader)

    • HijackLoader

      HijackLoader is a multistage loader first seen in 2023.

    • Hijackloader family

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks