General
-
Target
System_Update_Win10.4a4793a31463b.cpl.exe
-
Size
73KB
-
Sample
220929-qz83xacadj
-
MD5
90a417a2f0b30b3fcd7a958edecc5777
-
SHA1
590d6273e401526c76b4cbe35393e29f400363ae
-
SHA256
bc3a0e276a26612ffa45f229b069b624750e2c0737b2af2f934378d85d87a2f9
-
SHA512
a7466139bbc61bb5c36c1d11958ca6e0e4e4608df25d7f6e7c9afb62a72ccb8d2e78a0bfec0cb4b3942ed697be8111dc66405926f4a0f5cda5d8162396ac93b4
-
SSDEEP
1536:Awnu+nR6RxOZ46S3CTNqF9NyiBrhcw8FBP:fu+u6y0MLyYh8FZ
Static task
static1
Behavioral task
behavioral1
Sample
System_Update_Win10.4a4793a31463b.cpl.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
System_Update_Win10.4a4793a31463b.cpl.dll
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
System_Update_Win10.4a4793a31463b.cpl.exe
-
Size
73KB
-
MD5
90a417a2f0b30b3fcd7a958edecc5777
-
SHA1
590d6273e401526c76b4cbe35393e29f400363ae
-
SHA256
bc3a0e276a26612ffa45f229b069b624750e2c0737b2af2f934378d85d87a2f9
-
SHA512
a7466139bbc61bb5c36c1d11958ca6e0e4e4608df25d7f6e7c9afb62a72ccb8d2e78a0bfec0cb4b3942ed697be8111dc66405926f4a0f5cda5d8162396ac93b4
-
SSDEEP
1536:Awnu+nR6RxOZ46S3CTNqF9NyiBrhcw8FBP:fu+u6y0MLyYh8FZ
Score10/10-
Detect magniber ransomware
-
Magniber Ransomware
Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.
-
Suspicious use of SetThreadContext
-