Overview

overview

10

Static

static

3

2024-06-30...er.exe

windows7-x64

10

2024-06-30...er.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    0s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-06-2024 14:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-06-30_7dc1c6eb738c747021cc092b2d634a50_mafia_magniber.exe

  • Size

    6.1MB

  • MD5

    7dc1c6eb738c747021cc092b2d634a50

  • SHA1

    5e96e99c584200f93ae91e6bce17ab63eba7e27d

  • SHA256

    5a36f1f912433d71f5fbd6bfb533a7160f9a6b35855d8e7a93acdd027368face

  • SHA512

    e0e9394c93d55d4f5db54c475de01b218c139ac3ee8f968057010dace003641c8fc79e7ac14734841e096c475eeab358bfa98be13068efbe4d9004265759c6e9

  • SSDEEP

    196608:m8GZGVPiPnswrxnUgSguj9oy6FLOyomFHKnP:m8GZqknsgxxSxjanF

Score
10/10
banloaddownloaderdroppertrojan

Malware Config

Signatures

  • Banload

    Banload variants download malicious files, then install and execute the files.

    trojandropperdownloaderbanload
  • Checks BIOS information in registry 2 TTPs 2 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Modifies registry class 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-30_7dc1c6eb738c747021cc092b2d634a50_mafia_magniber.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-30_7dc1c6eb738c747021cc092b2d634a50_mafia_magniber.exe"
    1⤵
    • Checks BIOS information in registry
    • Modifies registry class
    PID:728

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/728-7-0x0000000003140000-0x0000000003340000-memory.dmp
    Filesize

    2.0MB

    Download
  • memory/728-8-0x0000000000400000-0x0000000000D6A000-memory.dmp
    Filesize

    9.4MB

    Download
  • memory/728-1-0x0000000003140000-0x0000000003340000-memory.dmp
    Filesize

    2.0MB

    Download
  • memory/728-11-0x0000000000400000-0x0000000000D6A000-memory.dmp
    Filesize

    9.4MB

    Download
  • memory/728-15-0x0000000000400000-0x0000000000D6A000-memory.dmp
    Filesize

    9.4MB

    Download
  • memory/728-12-0x0000000000400000-0x0000000000D6A000-memory.dmp
    Filesize

    9.4MB

    Download
  • memory/728-14-0x0000000000400000-0x0000000000D6A000-memory.dmp
    Filesize

    9.4MB

    Download
  • memory/728-16-0x0000000000400000-0x0000000000D6A000-memory.dmp
    Filesize

    9.4MB

    Download