General
-
Target
System_Update_Win10.1e958551c7739.zip
-
Size
43KB
-
Sample
220929-qznrzacacq
-
MD5
4a9c73ee485985f4efa2f5ba2b1e1e31
-
SHA1
3b58a713ca191afbdb3c7b32f33dcda8c2dc359a
-
SHA256
3f62866a6d2a6cc143db2780fc933f92994e080c81afc74e0ed97ec272474724
-
SHA512
48ed8dbe4a1ac9e15ef2469aacb5c4e44cb11bb0f06687556792a238d2cb090188a99a46c7d82ef43d68340bbbd924ef4f06a14c1ba3939962abf5772ba65b42
-
SSDEEP
768:Hjt/JRKmCKgs7Z8MSuIopJpGjTbw2qKDLAQ/BYaj6vbPsuj/bNL:jsm8s7Z8MS70JMjT+K3AQpiVjZL
Static task
static1
Behavioral task
behavioral1
Sample
System_Update_Win10.4a4793a31463b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
System_Update_Win10.4a4793a31463b.dll
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
System_Update_Win10.4a4793a31463b.cpl
-
Size
73KB
-
MD5
90a417a2f0b30b3fcd7a958edecc5777
-
SHA1
590d6273e401526c76b4cbe35393e29f400363ae
-
SHA256
bc3a0e276a26612ffa45f229b069b624750e2c0737b2af2f934378d85d87a2f9
-
SHA512
a7466139bbc61bb5c36c1d11958ca6e0e4e4608df25d7f6e7c9afb62a72ccb8d2e78a0bfec0cb4b3942ed697be8111dc66405926f4a0f5cda5d8162396ac93b4
-
SSDEEP
1536:Awnu+nR6RxOZ46S3CTNqF9NyiBrhcw8FBP:fu+u6y0MLyYh8FZ
Score10/10-
Detect magniber ransomware
-
Magniber Ransomware
Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.
-
Suspicious use of SetThreadContext
-