General

  • Target

    Antivirus_Upgrade_Cloud.680409c94d12.cpl.exe

  • Size

    1.2MB

  • Sample

    220915-n8lmvsdaa9

  • MD5

    b2de8946fb439575f2777559e1a74095

  • SHA1

    1ad2a01982c85718bf883899c3de7d329c8e4057

  • SHA256

    79494b2b76515207a2cf1a29484096cbf884ea4b0e2b834af07beac7879ce714

  • SHA512

    bb6f4f952a8067aab434e45f38565ad3f1d7fb7c78626608ac6fffb08b145ead5d9643e7a88f6cacb68ae45ade644ad6d4be32d4ee291767074006e874147943

  • SSDEEP

    1536:gOY47IHwHDLvujZZmn/tUuNpOLR1aJmvH8GsBjW5BKbOTWgYwJkRG5z:gOt7rHDLvUZmn/t7Npu/GIkRG5z

Score
10/10

Malware Config

Targets

    • Target

      Antivirus_Upgrade_Cloud.680409c94d12.cpl.exe

    • Size

      1.2MB

    • MD5

      b2de8946fb439575f2777559e1a74095

    • SHA1

      1ad2a01982c85718bf883899c3de7d329c8e4057

    • SHA256

      79494b2b76515207a2cf1a29484096cbf884ea4b0e2b834af07beac7879ce714

    • SHA512

      bb6f4f952a8067aab434e45f38565ad3f1d7fb7c78626608ac6fffb08b145ead5d9643e7a88f6cacb68ae45ade644ad6d4be32d4ee291767074006e874147943

    • SSDEEP

      1536:gOY47IHwHDLvujZZmn/tUuNpOLR1aJmvH8GsBjW5BKbOTWgYwJkRG5z:gOt7rHDLvUZmn/t7Npu/GIkRG5z

    Score
    10/10
    • Detect magniber ransomware

    • Magniber Ransomware

      Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks