Analyzing a Magnitude EK Appx Package Dropping Magniber
Tags
Common Information
| Type | Value |
|---|---|
| UUID | 93084fa9-7cc1-4467-83d3-79992ef4560c |
| Fingerprint | 863a2b184cfe06b8 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Jan. 2, 2022, midnight |
| Added to db | Sept. 26, 2022, 9:34 a.m. |
| Last updated | Nov. 17, 2024, 6:30 p.m. |
| Headline | Analyzing a Magnitude EK Appx Package Dropping Magniber |
| Title | Analyzing a Magnitude EK Appx Package Dropping Magniber |
| Detected Hints/Tags/Attributes | 0/0/32 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://forensicitguy.github.io/analyzing-magnitude-magniber-appx/ |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 58 | redcanary.com |
|
| Details | Domain | 93 | bazaar.abuse.ch |
|
| Details | Domain | 2 | codeintegrity.cat |
|
| Details | Domain | 73 | schemas.microsoft.com |
|
| Details | Domain | 1 | as.microsoft.com |
|
| Details | Domain | 149 | system.security |
|
| Details | Domain | 48 | pefile.pe |
|
| Details | File | 2 | png.png |
|
| Details | File | 1 | scale-150.png |
|
| Details | File | 1 | square44x44logo.tar |
|
| Details | File | 1 | getsize-32.png |
|
| Details | File | 1 | altform-unplated_targetsize-32.png |
|
| Details | File | 1 | altform-lightunplated_targetsize-32.png |
|
| Details | File | 1 | eediwjus.exe |
|
| Details | File | 1 | eediwjus.dll |
|
| Details | File | 9 | appxmanifest.xml |
|
| Details | File | 5 | appxblockmap.xml |
|
| Details | File | 1 | storelogo.png |
|
| Details | File | 1 | 'eediwjus.dll |
|
| Details | File | 1 | bin.opt |
|
| Details | File | 3 | ional_header.dat |
|
| Details | md5 | 1 | 3439bbe95df314d390cc4862cdad94fd |
|
| Details | md5 | 22 | f34d5f2d4577ed6d9ceec516c1f5a744 |
|
| Details | md5 | 1 | e7e4878847d31c4de301d3edf7378ecb |
|
| Details | sha1 | 1 | 92429885d54a05ed87a5c14d34aa504c28ea8b54 |
|
| Details | sha1 | 1 | a93d0f59b3374c6d3669a5872d44515f056e9dbf |
|
| Details | sha256 | 1 | da1729efaaa590d66f46d388680ed5b1b956246ababd277e7cdd14f90fbf60fa |
|
| Details | sha256 | 1 | ad4f74c0c3ac37e6f1cf600a96ae203c38341d263dbac0741e602686794c4f5a |
|
| Details | sha256 | 1 | f423bd6daae6c8002acf5c203267e015f7beb4c52ed54a78789dd86ab35e46c6 |
|
| Details | IPv4 | 56 | 1.3.6.1 |
|
| Details | IPv4 | 5 | 11.60.2.1 |
|
| Details | IPv4 | 4 | 2.5.4.15 |