Overview

overview

10

Static

static

3

zp2428m.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    zp2428m.bin.zip

  • Size

    25KB

  • Sample

    240324-wymq6see75

  • MD5

    c28fb0aedb809bdee0eea643e5e193b9

  • SHA1

    051cc80586e87ed1626fe3da94929b42c310d036

  • SHA256

    4d0c920b668f601929c25b6a0d26dd9cdc1714b264eed97d89426f04f065b3ac

  • SHA512

    17f463ff390eda90267b5dd4dae18f67fd08b38e42872ade52ec24e6e41e0e73597a607edfc1e398e39491a1a4b019ec1cd86c8a0fddd2dcbf42f75dcedc8ec6

  • SSDEEP

    384:uqMEmO6Fekxr/6CXsFC+V+U6+XtEl/jEGvx8eqPO6EfE6tzy9TZIaXZgP7F:BTmO6fXsFzXtEl/VDMO6EM6ofuR

Score
10/10
magniberransomware

Malware Config

Targets

    • Target

      zp2428m.bin

    • Size

      27KB

    • MD5

      5ce57e2fbc4192b086dacc3cc4238e93

    • SHA1

      ee2fcec7799eb0fe049c21ee66e5371fad9e2a1e

    • SHA256

      fc00cde7fb4a752d4aded4c189dfae2388059bb7bae63794a3257f4aa95a803a

    • SHA512

      2469cf5e016718ea395771dbae3160e36106bac70f5c7cad92872deccee2069aa101f647b922e973f68d28a54ddce7547ee9c52e402cb7e6cc74af334bb2530a

    • SSDEEP

      384:dvPpOem2MDjDZNwxye01giAWGMhADD5cHUxH5gkyQH+hXzlovFZb7v/09w9d6b30:1pSfeViA5T8UU/YUze/Wwub3zg

    Score
    10/10
    magniberransomware

    • Detect magniber ransomware

    • Magniber Ransomware

      Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.

      ransomwaremagniber

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomware

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks