General
-
Target
2025-02-06_46032648dd9e0bea46c5d4c280f69806_luca-stealer_magniber
-
Size
4.1MB
-
Sample
250206-mxnseavkdr
-
MD5
46032648dd9e0bea46c5d4c280f69806
-
SHA1
c24bdd2f20be5f11b8d638fb5e1edb28b4ba2f7c
-
SHA256
388ce6e63d0a21bbfd00d9c0068a59ffa314b0e93e6f2ac2d2496f6fcd1fed2f
-
SHA512
5327059c585877c521760e01725a5e42209c323aca486bd8b762f2809a30816e45f5ceae6b2aacb307b480f2f2c2ab92b35cac0d6e7968567147c4f82dc117f7
-
SSDEEP
49152:CZc4Wxh2ngOYmSnbXmkasVUKyoa4xxz2HRijUUbgfyq0uYQbFfqIrofzCqa1OfcQ:CH9Qb9EoaGxz2H1UMfXtoc5QsRSW/zS
Static task
static1
Behavioral task
behavioral1
Sample
2025-02-06_46032648dd9e0bea46c5d4c280f69806_luca-stealer_magniber.exe
Resource
win7-20241010-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
2025-02-06_46032648dd9e0bea46c5d4c280f69806_luca-stealer_magniber
-
Size
4.1MB
-
MD5
46032648dd9e0bea46c5d4c280f69806
-
SHA1
c24bdd2f20be5f11b8d638fb5e1edb28b4ba2f7c
-
SHA256
388ce6e63d0a21bbfd00d9c0068a59ffa314b0e93e6f2ac2d2496f6fcd1fed2f
-
SHA512
5327059c585877c521760e01725a5e42209c323aca486bd8b762f2809a30816e45f5ceae6b2aacb307b480f2f2c2ab92b35cac0d6e7968567147c4f82dc117f7
-
SSDEEP
49152:CZc4Wxh2ngOYmSnbXmkasVUKyoa4xxz2HRijUUbgfyq0uYQbFfqIrofzCqa1OfcQ:CH9Qb9EoaGxz2H1UMfXtoc5QsRSW/zS
-
Modifies firewall policy service
-
Sality family
-
UAC bypass
-
Windows security bypass
-
Windows security modification
-
Checks whether UAC is enabled
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
5