Overview

overview

10

Static

static

SYSTEM.Sec....0.jse

windows7-x64

10

SYSTEM.Sec....0.jse

windows10-2004-x64

10

Analysis

  • max time kernel
    43s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    15-09-2022 01:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SYSTEM.Security.Database.Upgrade.Win10.0.jse

  • Size

    185KB

  • MD5

    f6d2fc78661b55258fb704f66c9949e4

  • SHA1

    7c4608440e4afcb032890edd4deef18a0ce3c8dd

  • SHA256

    6a68217b951f9655e4a7ed13fcfc4696ac5d231450fe7d2be8b6a1d71425752c

  • SHA512

    9f66641f19e8046b19f7bffa056ec3e677aae853102dded94c22665381d0d2b65334c16c74d7b64df319b1518931d6ad281ad86c1fbc67ee6ba1984f67506dce

  • SSDEEP

    3072:dthtQYzUz8giIajyEPeR00t/+DYhRkEIKf+6yr3S1IuIDbHBX66vPYH/J25gfgbD:z73zUz8gCjyUeihSRkCy3H36HxgbD

Score
10/10
magniberransomware

Malware Config

Signatures

  • Detect magniber ransomware 2 IoCs
  • Magniber Ransomware

    Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.

    ransomwaremagniber

Processes

  • C:\Windows\System32\WScript.exe
    C:\Windows\System32\WScript.exe "C:\Users\Admin\AppData\Local\Temp\SYSTEM.Security.Database.Upgrade.Win10.0.jse"
    1⤵
      PID:1948

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1948-54-0x0000000000330000-0x0000000000342000-memory.dmp

      Filesize

      72KB

      Download

    • memory/1948-55-0x00000000053AA000-0x00000000053B5000-memory.dmp

      Filesize

      44KB

      Download