Overview

overview

10

Static

static

SYSTEM.Sec....0.jse

windows7-x64

10

SYSTEM.Sec....0.jse

windows10-2004-x64

10

Analysis

  • max time kernel
    47s
  • max time network
    52s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    13-09-2022 07:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SYSTEM.Security.Database.Upgrade.Win10.0.jse

  • Size

    162KB

  • MD5

    a42d1d053f9b042cadb123bae1d9a799

  • SHA1

    38e6e535ec406f7a1a32080328a7f15f75bb91ec

  • SHA256

    d0375fc9cbb564fb18e0afea926c7faf50464b9afb329913dd5486c7cbb36e2e

  • SHA512

    771084247ecf8366babc3bab84880383bdfabde6cc4ae784fd7b918c51e2dd06b36a5040f71c1aa89a65cd1d1f5fa1db15171d1ac98c8d6af2cc7fb8e7210599

  • SSDEEP

    3072:dA4PMqloVupG97fDGoglotP5QBaTv2rUJckkkkkBslKM/5woYKHDCPH3uO5AIHfo:dA4P7lMuRoDWaTv2QqkkkkkUKvHEpMQ

Score
10/10
magniberransomware

Malware Config

Signatures

  • Detect magniber ransomware 2 IoCs
  • Magniber Ransomware

    Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.

    ransomwaremagniber

Processes

  • C:\Windows\System32\WScript.exe
    C:\Windows\System32\WScript.exe "C:\Users\Admin\AppData\Local\Temp\SYSTEM.Security.Database.Upgrade.Win10.0.jse"
    1⤵
      PID:1268

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1268-54-0x0000000000130000-0x0000000000142000-memory.dmp

      Filesize

      72KB

      Download

    • memory/1268-55-0x0000000005470000-0x000000000547A000-memory.dmp

      Filesize

      40KB

      Download