magniber | 9095bbb4b123a353a856634166f193124bdc4591cb3a38922b2283acc1d966d6

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
15-09-2022 12:55

Target

Antivirus_Upgrade_Cloud.b79e8f66eb124.jse
Size

186KB
MD5

871d0084a53bb7733346b167f7e67e36
SHA1

2b75f4d60b357ea3cdd53a73e8dd00148fea0889
SHA256

9095bbb4b123a353a856634166f193124bdc4591cb3a38922b2283acc1d966d6
SHA512

b77f916dfe0fa3ebcd7ca7fef2df57d9e3e647a37ee90e5bdf845cc715f2ad58f7c3053d55b43d108da004ea1097826ad7dca7fde5f6f45bcb6781acbe68ddaf
SSDEEP

3072:S7e1lcDeY9tstU6UtjvN7MLFfOVMumRRCivI7lvLAe25gfV99p:S4uDBtstmtJouig7V99p

Score

10^/10

Detect magniber ransomware 2 IoCs

Processes:

resource	yara_rule
behavioral1/memory/1784-54-0x00000000003C0000-0x00000000003D2000-memory.dmp	family_magniber
behavioral1/memory/1784-55-0x0000000005201000-0x000000000520C000-memory.dmp	family_magniber

Magniber Ransomware
Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.
ransomware magniber

C:\Windows\System32\WScript.exe
C:\Windows\System32\WScript.exe "C:\Users\Admin\AppData\Local\Temp\Antivirus_Upgrade_Cloud.b79e8f66eb124.jse"
1⤵
PID:1784

memory/1784-54-0x00000000003C0000-0x00000000003D2000-memory.dmp

Filesize
72KB

Download
memory/1784-55-0x0000000005201000-0x000000000520C000-memory.dmp

Filesize
44KB

Download