magniber | 266f930572d3006c36ba7e97b4ffed107827decd7738a58c218e1ae5450fbe95

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
15-09-2022 12:12

Target

266f930572d3006c36ba7e97b4ffed107827decd7738a58c218e1ae5450fbe95.jse
Size

176KB
MD5

ad184cf93d38d51111a7ef305992eb5f
SHA1

37b05248dbd96c8a94082471069f24a7b1036313
SHA256

266f930572d3006c36ba7e97b4ffed107827decd7738a58c218e1ae5450fbe95
SHA512

a37d0984d65b0eaef4169a22e5802ac8f24b9508b717f46b2911ad583f5a4b2e4f59bd31c317976f14995ba69a7855318ef7d5e0ba866d3b8fc1db352a14c56e
SSDEEP

3072:x4xkakIeI6QKzm+bga+V9cw+yOTE4o5V0eD11TbXx1113B1WR9KflL11H6IFNC4v:GfelQKzbMYJQ4o5VxhakLDNyjt8

Score

10^/10

Detect magniber ransomware 2 IoCs

Processes:

resource	yara_rule
behavioral1/memory/864-54-0x0000000000430000-0x0000000000442000-memory.dmp	family_magniber
behavioral1/memory/864-55-0x00000000055E3000-0x00000000055EE000-memory.dmp	family_magniber

Magniber Ransomware
Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.
ransomware magniber

C:\Windows\System32\WScript.exe
C:\Windows\System32\WScript.exe "C:\Users\Admin\AppData\Local\Temp\266f930572d3006c36ba7e97b4ffed107827decd7738a58c218e1ae5450fbe95.jse"
1⤵
PID:864

memory/864-54-0x0000000000430000-0x0000000000442000-memory.dmp

Filesize
72KB

Download
memory/864-55-0x00000000055E3000-0x00000000055EE000-memory.dmp

Filesize
44KB

Download