General
-
Target
System_Update_Win10.64267e0e09a43.cpl.exe
-
Size
71KB
-
Sample
220929-qz83xacacr
-
MD5
3b0af7a5a1091daaa817ab010f6ac98c
-
SHA1
da2fb50f474a11bb407a3b6bc59e4e309e04ebc2
-
SHA256
354f26cc356623d5d099ce3ab1f36821151bb59b3e77521bb903ec1ee3d8f612
-
SHA512
9e92fbad04090745d7678e16e753d065b07ab8649a0938c7c8ac53558858b00b25f36bd3aec7467c0acde7abff6e7527d5d86a23965c4609a9f80f168a0b373d
-
SSDEEP
1536:4CMGT+dKdr/XMOgUtFnn3BOVD5yRcUDV++:Xj33t1nw50VT
Static task
static1
Behavioral task
behavioral1
Sample
System_Update_Win10.64267e0e09a43.cpl.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
System_Update_Win10.64267e0e09a43.cpl.dll
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
System_Update_Win10.64267e0e09a43.cpl.exe
-
Size
71KB
-
MD5
3b0af7a5a1091daaa817ab010f6ac98c
-
SHA1
da2fb50f474a11bb407a3b6bc59e4e309e04ebc2
-
SHA256
354f26cc356623d5d099ce3ab1f36821151bb59b3e77521bb903ec1ee3d8f612
-
SHA512
9e92fbad04090745d7678e16e753d065b07ab8649a0938c7c8ac53558858b00b25f36bd3aec7467c0acde7abff6e7527d5d86a23965c4609a9f80f168a0b373d
-
SSDEEP
1536:4CMGT+dKdr/XMOgUtFnn3BOVD5yRcUDV++:Xj33t1nw50VT
Score10/10-
Detect magniber ransomware
-
Magniber Ransomware
Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.
-
Suspicious use of SetThreadContext
-