General
-
Target
System_Update_Win10.67f799c09be21.zip
-
Size
43KB
-
Sample
220929-qznrzabad5
-
MD5
80b29546c7fe266615ced6b694524371
-
SHA1
381ca097a82f6f4d0bc499ca6c0fe5411b2e61af
-
SHA256
838ff9687bd425185f43e90f21d6f652538126876fc37bb1ac1f738223910274
-
SHA512
3144c53a7be9b3788979794ae7224936a2eea6963c1beddbd309c06a50f45fca4276beb5a716569f324076cfa798a32d61939adda09d5ca67c2c6ec4aba89287
-
SSDEEP
768:oUKvBzC7Rb1SlM5+SJn8RZGpY3dXWL4yCU3c9fm8kVu6K745sxfTOC3DNMkfyIY:oUCO7R5SnBGpUd7XUs9u8cK7faaDNhY
Static task
static1
Behavioral task
behavioral1
Sample
System_Update_Win10.64267e0e09a43.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
System_Update_Win10.64267e0e09a43.dll
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
System_Update_Win10.64267e0e09a43.cpl
-
Size
71KB
-
MD5
3b0af7a5a1091daaa817ab010f6ac98c
-
SHA1
da2fb50f474a11bb407a3b6bc59e4e309e04ebc2
-
SHA256
354f26cc356623d5d099ce3ab1f36821151bb59b3e77521bb903ec1ee3d8f612
-
SHA512
9e92fbad04090745d7678e16e753d065b07ab8649a0938c7c8ac53558858b00b25f36bd3aec7467c0acde7abff6e7527d5d86a23965c4609a9f80f168a0b373d
-
SSDEEP
1536:4CMGT+dKdr/XMOgUtFnn3BOVD5yRcUDV++:Xj33t1nw50VT
Score10/10-
Detect magniber ransomware
-
Magniber Ransomware
Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.
-
Suspicious use of SetThreadContext
-