General

  • Target

    System_Update_Win10.1e958551c7739.zip

  • Size

    43KB

  • Sample

    220929-qznrzacacq

  • MD5

    4a9c73ee485985f4efa2f5ba2b1e1e31

  • SHA1

    3b58a713ca191afbdb3c7b32f33dcda8c2dc359a

  • SHA256

    3f62866a6d2a6cc143db2780fc933f92994e080c81afc74e0ed97ec272474724

  • SHA512

    48ed8dbe4a1ac9e15ef2469aacb5c4e44cb11bb0f06687556792a238d2cb090188a99a46c7d82ef43d68340bbbd924ef4f06a14c1ba3939962abf5772ba65b42

  • SSDEEP

    768:Hjt/JRKmCKgs7Z8MSuIopJpGjTbw2qKDLAQ/BYaj6vbPsuj/bNL:jsm8s7Z8MS70JMjT+K3AQpiVjZL

Score
10/10

Malware Config

Targets

    • Target

      System_Update_Win10.4a4793a31463b.cpl

    • Size

      73KB

    • MD5

      90a417a2f0b30b3fcd7a958edecc5777

    • SHA1

      590d6273e401526c76b4cbe35393e29f400363ae

    • SHA256

      bc3a0e276a26612ffa45f229b069b624750e2c0737b2af2f934378d85d87a2f9

    • SHA512

      a7466139bbc61bb5c36c1d11958ca6e0e4e4608df25d7f6e7c9afb62a72ccb8d2e78a0bfec0cb4b3942ed697be8111dc66405926f4a0f5cda5d8162396ac93b4

    • SSDEEP

      1536:Awnu+nR6RxOZ46S3CTNqF9NyiBrhcw8FBP:fu+u6y0MLyYh8FZ

    Score
    10/10
    • Detect magniber ransomware

    • Magniber Ransomware

      Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks