General
-
Target
Antivirus_Upgrade_Cloud.680409c94d12.cpl.exe
-
Size
1.2MB
-
Sample
220915-n8lmvsdaa9
-
MD5
b2de8946fb439575f2777559e1a74095
-
SHA1
1ad2a01982c85718bf883899c3de7d329c8e4057
-
SHA256
79494b2b76515207a2cf1a29484096cbf884ea4b0e2b834af07beac7879ce714
-
SHA512
bb6f4f952a8067aab434e45f38565ad3f1d7fb7c78626608ac6fffb08b145ead5d9643e7a88f6cacb68ae45ade644ad6d4be32d4ee291767074006e874147943
-
SSDEEP
1536:gOY47IHwHDLvujZZmn/tUuNpOLR1aJmvH8GsBjW5BKbOTWgYwJkRG5z:gOt7rHDLvUZmn/t7Npu/GIkRG5z
Static task
static1
Behavioral task
behavioral1
Sample
Antivirus_Upgrade_Cloud.680409c94d12.cpl.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Antivirus_Upgrade_Cloud.680409c94d12.cpl.dll
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
Antivirus_Upgrade_Cloud.680409c94d12.cpl.exe
-
Size
1.2MB
-
MD5
b2de8946fb439575f2777559e1a74095
-
SHA1
1ad2a01982c85718bf883899c3de7d329c8e4057
-
SHA256
79494b2b76515207a2cf1a29484096cbf884ea4b0e2b834af07beac7879ce714
-
SHA512
bb6f4f952a8067aab434e45f38565ad3f1d7fb7c78626608ac6fffb08b145ead5d9643e7a88f6cacb68ae45ade644ad6d4be32d4ee291767074006e874147943
-
SSDEEP
1536:gOY47IHwHDLvujZZmn/tUuNpOLR1aJmvH8GsBjW5BKbOTWgYwJkRG5z:gOt7rHDLvUZmn/t7Npu/GIkRG5z
Score10/10-
Detect magniber ransomware
-
Magniber Ransomware
Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.
-
Suspicious use of SetThreadContext
-