Analysis
-
max time kernel
0s -
max time network
7s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
27-12-2023 04:44
Static task
static1
Behavioral task
behavioral1
Sample
a3e7152abd213f303c1561aa20ed9cea.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a3e7152abd213f303c1561aa20ed9cea.dll
Resource
win10v2004-20231215-en
General
-
Target
a3e7152abd213f303c1561aa20ed9cea.dll
-
Size
38KB
-
MD5
a3e7152abd213f303c1561aa20ed9cea
-
SHA1
0cfb6ac5f567c4dd3e9ebe741c2b8b0e19cb243e
-
SHA256
8ab78bc8884b9de573a3dc19e7fc206e925f643aee3f152d19e8d1caa90b6312
-
SHA512
854dad9d639cb4c9860c7dcd2d1bb7204ce3efe0a5bc0521d37a61e7ef3787a8334620d718ec2abdbbd077122c008273ce29cf1382af45d8411c431f5cf2e777
-
SSDEEP
768:bL2WWrr4WdC5pqndJgr8q39GGL3RqL9Q1VW028JQyt3uh11yCg:GdC5pqndJIHtGCE9Q1rRxIM
Malware Config
Signatures
-
Detect magniber ransomware 1 IoCs
Processes:
resource yara_rule behavioral2/memory/4912-0-0x000001E91D6B0000-0x000001E91DCF9000-memory.dmp family_magniber -
Magniber Ransomware
Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.