Analysis
-
max time kernel
0s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
21-03-2024 10:43
Static task
static1
Behavioral task
behavioral1
Sample
db6e1b6448189f395724004a5465ce8c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
db6e1b6448189f395724004a5465ce8c.dll
Resource
win10v2004-20240226-en
General
-
Target
db6e1b6448189f395724004a5465ce8c.dll
-
Size
38KB
-
MD5
db6e1b6448189f395724004a5465ce8c
-
SHA1
96ae8d941c0f4a4f57e0c2e621ee57e82ccd88e4
-
SHA256
c7d0dd48bc5c3d78570fa583b6c05ec65202c6abb9d6bcf1a1bb7c5d5b74e091
-
SHA512
330f7b442764c93f9e972c95ac68dffce44a58fc0c56348b0d5169a5a7ba34ddce6dca5ee5f6d7fa1751cffdebec76f128cae9dbc182c807211a91c7bf2f9532
-
SSDEEP
768:Hxk0dnXaA0tiqdwmWlCh+o6pMauVwhQg63nJC0fGu+/wpQO9Jp1Lwu:C0otY9iH3auVwKgcJPkJO7
Malware Config
Signatures
-
Detect magniber ransomware 2 IoCs
resource yara_rule behavioral2/memory/5024-0-0x00000285EA330000-0x00000285EA66D000-memory.dmp family_magniber behavioral2/memory/2540-16-0x00000246C4C40000-0x00000246C4C45000-memory.dmp family_magniber -
Magniber Ransomware
Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.