Analysis

  • max time kernel
    43s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29-09-2022 13:42

General

  • Target

    SYSTEM.Critical.Upgrade.Win10.0.26e26b85be2e07d.js

  • Size

    212KB

  • MD5

    6a76eeb61c3f44ae8d61bbddc9b1f58e

  • SHA1

    25ade112e1930ed4ca7501c0ab2944cb25738478

  • SHA256

    12921c2d0578f9d83ada9dfc4eb362ba5258d44e07741fcce87fdd91118d7cd2

  • SHA512

    a1b753cce043ee06b5b7520f4a46cc7fc704870d9d2ed9c7285bb2a4084a3075dff4c95ba369480dc5b9536ed2636bb856e4ac4e097322cb09b625260f13f518

  • SSDEEP

    1536:rcVvZx6Nl+Ywq8zNNR6E4JrLZ8hsnUKMkQcIntkov/VJH8Uq0is6EHqUXnxA+ETK:t25gfhe7

Score
10/10

Malware Config

Signatures

  • Detect magniber ransomware 1 IoCs
  • Magniber Ransomware

    Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\SYSTEM.Critical.Upgrade.Win10.0.26e26b85be2e07d.js
    1⤵
      PID:1824

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1824-54-0x000000001D660000-0x000000001D756000-memory.dmp

      Filesize

      984KB

    • memory/1824-55-0x0000000000230000-0x0000000000242000-memory.dmp

      Filesize

      72KB

    • memory/1824-56-0x0000000005580000-0x000000000558B000-memory.dmp

      Filesize

      44KB