magniber | bb864576586c22594ef8dd2ed7420015e31b4c83472522223970e4592301f0f7

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29-09-2022 13:50

Target

Antivirus_Upgrade_Cloud.1bfb82d816ad4.jse
Size

168KB
MD5

7c8cc6d9152df2679664eb7298d31b4f
SHA1

97ce336d29886674b9047ffeedb97fa5952d1bb0
SHA256

bb864576586c22594ef8dd2ed7420015e31b4c83472522223970e4592301f0f7
SHA512

0c5598de660b6f085c4780b8ecfa7358050bc9c063d8dd4e74b71a909551378747daa6f5a6ea9e98f1f814798d8ad176eb19207c15537e12a4985093eb8b8508
SSDEEP

3072:iQTPBA9ovz4cWf3OosFwKWXG1QCU/ueNYh6J7UGGQlqk2VV0poGGJGVRl8x3SG85:iQTBLN1FIXGqeZSG8EkK9nxa93

Score

10^/10

Detect magniber ransomware 2 IoCs

Processes:

resource	yara_rule
behavioral1/memory/1944-54-0x0000000001CC0000-0x0000000001CD2000-memory.dmp	family_magniber
behavioral1/memory/1944-55-0x000000000536C000-0x0000000005377000-memory.dmp	family_magniber

Magniber Ransomware
Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.
ransomware magniber

C:\Windows\System32\WScript.exe
C:\Windows\System32\WScript.exe "C:\Users\Admin\AppData\Local\Temp\Antivirus_Upgrade_Cloud.1bfb82d816ad4.jse"
1⤵
PID:1944

memory/1944-54-0x0000000001CC0000-0x0000000001CD2000-memory.dmp

Filesize
72KB

Download
memory/1944-55-0x000000000536C000-0x0000000005377000-memory.dmp

Filesize
44KB

Download