magniber | 266f930572d3006c36ba7e97b4ffed107827decd7738a58c218e1ae5450fbe95

Analysis

max time kernel
45s
max time network
48s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
15-09-2022 12:55

Target

Antivirus_Upgrade_Cloud.9fdd7aebbe418ed2.jse
Size

176KB
MD5

ad184cf93d38d51111a7ef305992eb5f
SHA1

37b05248dbd96c8a94082471069f24a7b1036313
SHA256

266f930572d3006c36ba7e97b4ffed107827decd7738a58c218e1ae5450fbe95
SHA512

a37d0984d65b0eaef4169a22e5802ac8f24b9508b717f46b2911ad583f5a4b2e4f59bd31c317976f14995ba69a7855318ef7d5e0ba866d3b8fc1db352a14c56e
SSDEEP

3072:x4xkakIeI6QKzm+bga+V9cw+yOTE4o5V0eD11TbXx1113B1WR9KflL11H6IFNC4v:GfelQKzbMYJQ4o5VxhakLDNyjt8

Score

10^/10

Detect magniber ransomware 2 IoCs

Processes:

resource	yara_rule
behavioral1/memory/1576-54-0x0000000000340000-0x0000000000352000-memory.dmp	family_magniber
behavioral1/memory/1576-55-0x0000000005733000-0x000000000573E000-memory.dmp	family_magniber

Magniber Ransomware
Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.
ransomware magniber

C:\Windows\System32\WScript.exe
C:\Windows\System32\WScript.exe "C:\Users\Admin\AppData\Local\Temp\Antivirus_Upgrade_Cloud.9fdd7aebbe418ed2.jse"
1⤵
PID:1576

memory/1576-54-0x0000000000340000-0x0000000000352000-memory.dmp

Filesize
72KB

Download
memory/1576-55-0x0000000005733000-0x000000000573E000-memory.dmp

Filesize
44KB

Download