magniber | bba85d79db69db1b638e24e0a426ccccdc5c95875b8c3a26aa959cce3f6c8575

Analysis

max time kernel
42s
max time network
224s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
08-09-2022 02:31

Target

bba85d79db69db1b638e24e0a426ccccdc5c95875b8c3a26aa959cce3f6c8575.jse
Size

167KB
MD5

a1f5a11ee4b1ae01ea986311bdc9a840
SHA1

0aacc589c57adba17786cbfa4446e6ce1ae48d2e
SHA256

bba85d79db69db1b638e24e0a426ccccdc5c95875b8c3a26aa959cce3f6c8575
SHA512

ce8db2d1da1f446df13ac6bc12a76d78b5578f787e0b24dccca4ebc7bb941e5d27336321c6338957fc198e92669345d95298b3fbaeca6e604666ee44d5f108f9
SSDEEP

3072:fHsGPsk+UsSlORiat8x8S4k1sZa7GGCcxaeQR3ReRw/H3MrqW25pf5w2D:fPsk+UjlOR1t8n1sGVCcxbQm28O5wo

Score

10^/10

Detect magniber ransomware 2 IoCs

Processes:

resource	yara_rule
behavioral1/memory/980-54-0x0000000000320000-0x0000000000332000-memory.dmp	family_magniber
behavioral1/memory/980-55-0x000000000561C000-0x0000000005627000-memory.dmp	family_magniber

Magniber Ransomware
Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.
ransomware magniber

C:\Windows\System32\WScript.exe
C:\Windows\System32\WScript.exe "C:\Users\Admin\AppData\Local\Temp\bba85d79db69db1b638e24e0a426ccccdc5c95875b8c3a26aa959cce3f6c8575.jse"
1⤵
PID:980

memory/980-54-0x0000000000320000-0x0000000000332000-memory.dmp

Filesize
72KB

Download
memory/980-55-0x000000000561C000-0x0000000005627000-memory.dmp

Filesize
44KB

Download