magniber | bba85d79db69db1b638e24e0a426ccccdc5c95875b8c3a26aa959cce3f6c8575

Analysis

max time kernel
43s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
08-09-2022 05:30

Target

Antivirus_Upgrade_Cloud.8a6cd22d83c0486.jse
Size

167KB
MD5

a1f5a11ee4b1ae01ea986311bdc9a840
SHA1

0aacc589c57adba17786cbfa4446e6ce1ae48d2e
SHA256

bba85d79db69db1b638e24e0a426ccccdc5c95875b8c3a26aa959cce3f6c8575
SHA512

ce8db2d1da1f446df13ac6bc12a76d78b5578f787e0b24dccca4ebc7bb941e5d27336321c6338957fc198e92669345d95298b3fbaeca6e604666ee44d5f108f9
SSDEEP

3072:fHsGPsk+UsSlORiat8x8S4k1sZa7GGCcxaeQR3ReRw/H3MrqW25pf5w2D:fPsk+UjlOR1t8n1sGVCcxbQm28O5wo

Score

10^/10

Detect magniber ransomware 2 IoCs

Processes:

resource	yara_rule
behavioral1/memory/1196-54-0x0000000000330000-0x0000000000342000-memory.dmp	family_magniber
behavioral1/memory/1196-55-0x000000000530C000-0x0000000005317000-memory.dmp	family_magniber

Magniber Ransomware
Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.
ransomware magniber

C:\Windows\System32\WScript.exe
C:\Windows\System32\WScript.exe "C:\Users\Admin\AppData\Local\Temp\Antivirus_Upgrade_Cloud.8a6cd22d83c0486.jse"
1⤵
PID:1196

memory/1196-54-0x0000000000330000-0x0000000000342000-memory.dmp

Filesize
72KB

Download
memory/1196-55-0x000000000530C000-0x0000000005317000-memory.dmp

Filesize
44KB

Download