magniber | 76c012f134e81138fb37ac3638488f309662efcc9bb4011ff8e54869f26bb119

Analysis

max time kernel
45s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
15-09-2022 12:40

Target

Antivirus_Upgrade_Cloud.2736a0cc3a2e1f.jse
Size

161KB
MD5

ed5481f4b64e048f09d5d9d880dafa23
SHA1

9948c71e77c9a7551f9f3b976da5b0e5e5950afe
SHA256

76c012f134e81138fb37ac3638488f309662efcc9bb4011ff8e54869f26bb119
SHA512

addd60848f245d83c70a65414b3d676e92ffdb2f31aa2de3497b8cda69ddb3938874aac062005c66d81af2451c545a5c871db4a392815cd9e69707b0388cbea0
SSDEEP

3072:5tCIP3D125lF+90AGp9K9zCdKuxkvhq8n8skOfx/bll25DftO5:PPz1GlF+9yjK9WBxkpq8n8mItO5

Score

10^/10

Detect magniber ransomware 2 IoCs

Processes:

resource	yara_rule
behavioral1/memory/2032-54-0x0000000000230000-0x0000000000242000-memory.dmp	family_magniber
behavioral1/memory/2032-55-0x0000000005511000-0x000000000551C000-memory.dmp	family_magniber

Magniber Ransomware
Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.
ransomware magniber

C:\Windows\System32\WScript.exe
C:\Windows\System32\WScript.exe "C:\Users\Admin\AppData\Local\Temp\Antivirus_Upgrade_Cloud.2736a0cc3a2e1f.jse"
1⤵
PID:2032

memory/2032-54-0x0000000000230000-0x0000000000242000-memory.dmp

Filesize
72KB

Download
memory/2032-55-0x0000000005511000-0x000000000551C000-memory.dmp

Filesize
44KB

Download