magniber | 805b51368b9b72794aa52fbc957b4617ce6a7517f8b4ae85698ddd036cdbb7ea

Analysis

max time kernel
43s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29-11-2022 10:47

Target

123d7744a407af376b4ee4402ff8bee588b40540bcfba22fb64768d1de8c1861.jse
Size

158KB
MD5

7b76b698e90df66d4f4bbecf24c95325
SHA1

65ba018f76ab977c3015540630befcd6e98cf9d9
SHA256

123d7744a407af376b4ee4402ff8bee588b40540bcfba22fb64768d1de8c1861
SHA512

1b36ec029df4d966a349aee30d672a61a55d5b75a85d77715fe308bd05ad209e24c94effdc7e07934bcd138ccabeb9755923fea735fe47e076cf1669b5050a06
SSDEEP

3072:Jm0DRG5CxnKvNN7x0r0AW4VRh/v2rdiFEnljKIwpAWFLpMh25nf2Oi:JvlGwFKvNN1k0avQiFiljKIwxLpB2Oi

Score

10^/10

Detect magniber ransomware 2 IoCs

Processes:

resource	yara_rule
behavioral1/memory/1736-54-0x0000000000230000-0x0000000000242000-memory.dmp	family_magniber
behavioral1/memory/1736-55-0x0000000005501000-0x000000000550C000-memory.dmp	family_magniber

Magniber Ransomware
Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.
ransomware magniber

C:\Windows\System32\WScript.exe
C:\Windows\System32\WScript.exe "C:\Users\Admin\AppData\Local\Temp\123d7744a407af376b4ee4402ff8bee588b40540bcfba22fb64768d1de8c1861.jse"
1⤵
PID:1736

memory/1736-54-0x0000000000230000-0x0000000000242000-memory.dmp

Filesize
72KB

Download
memory/1736-55-0x0000000005501000-0x000000000550C000-memory.dmp

Filesize
44KB

Download