{"id":4124,"date":"2022-12-14T07:50:16","date_gmt":"2022-12-14T07:50:16","guid":{"rendered":"\/cybersecurity-blog\/?p=3341"},"modified":"2022-12-21T06:40:14","modified_gmt":"2022-12-21T06:40:14","slug":"release-notes-december-14-2022","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/","title":{"rendered":"Release notes  December 14, 2022"},"content":{"rendered":"\n<p>More organizations are starting to use the latest versions of Windows, and it is worth using the same system fingerprint to detect threats more accurately. And today, we reveal a new update on the service exactly for this case. Here is a new addition to the ANY.RUN\u2019s virtual machine \u2013 Windows&nbsp;11 operating system.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Update overview:<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Analyze in Windows 11<\/strong><\/li><\/ul>\n\n\n\n<p>Launch samples in a new OS to investigate more threats and vulnerabilities that target this version.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Windows 11 use case&nbsp;<\/h3>\n\n\n\n<p>The mass migration to Windows 11 forced malware writers to adapt their works to the new operating system. They began to actively apply new methods and use features, vulnerabilities, and bugs in the new OS to stealthily install and run malware. So now, Hunter and Enterprise users can run a new version of Windows and analyze malware together with <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/any.run\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release1412&amp;utm_content=landing\" target=\"_blank\">ANY.RUN sandbox<\/a>.<br><\/p>\n\n\n\n<p>Let\u2019s take a look at the<a href=\"https:\/\/app.any.run\/tasks\/5111e3cb-4dff-4a95-9ecd-b78dceef1904\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release1412&amp;utm_content=task\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\"> Magniber ransomware sample.<\/a> This year the malware has been distributed as a disguised Windows 11 upgrade patch package. Magniber remained the same, but it is able to infect various Windows versions, including the 11th OS:&nbsp;<br><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/6dK6Zt9UAAdPFR67nflF9rZiSWVI7P0doSI6I2EFk6ZZNfQI_NV8BMmBcSny0N24KqVRnFrfBJGdI_kiFxf0Pxbf7T6TbJVOz5HxpV6yF1W6GxUD7jyHAQMwGCtlDwf68n0LWxqTrxq4s3zK3kdxq_VMOYbrJoKp1yBP01aITY4HgE5u9DfUBRrN05zD9g\" alt=\"Windows 11 sample in ANY.RUN\"\/><\/figure>\n\n\n\n<p>The distribution method is still the same as in previous attacks in<a href=\"https:\/\/cyware.com\/news\/fake-windows-10-updates-infect-systems-with-magniber-ransomware-ac2be82a\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\"> April<\/a>, including downloads from forums, cracked software websites, and fake porn websites.<br><\/p>\n\n\n\n<p>The ransomware uses the RSA (2048 bits long)+AES encryption algorithms. And it is quite challenging to decrypt. But ANY.RUN can successfully detect this malware, and you can monitor the whole attack in Windows 11 in real-time mode. But we recommend all users run the malicious programs only in a secure VM.<br><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh6.googleusercontent.com\/Ni2g0JHXoQlWfNexO45nwryzZLky26N7QCwKbb8npQhOVUUmDNHn9nIXDTGjuF0wUM9Q4wWBBiqOrGDZIsPjYK4CwitTODdLojHgK2AXqUQltmMHvvxqX5VWu6Txv3kReaiYat_qlf73W28lW4oqXQeOiLnmqeUg7dJfdIGKFuzzBuIh9jzNSc3ThCxQhQ\" alt=\"Magniber sample in ANY.RUN\"\/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>With the latest version of the Windows, you can test exploits and check the exploitability of vulnerabilities aimed at this OS. It will keep your organization&#8217;s security safe&nbsp;and&nbsp;up-to-date.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Conclusion&nbsp;<\/h3>\n\n\n\n<p>Cybercriminals will endeavor to ensure the effectiveness of their malicious intentions. That\u2019s why they adopt new features, OSs, program builds to make their programs invincible. But we also stay strong and don\u2019t want to give up. You can analyze samples in VM using Windows 11 OS to combat these threats and test vulnerabilities.&nbsp;<\/p>\n\n\n\n<p><br>Try this new addition to <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/any.run\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=release1412&amp;utm_content=landing\" target=\"_blank\">ANY.RUN sandbox<\/a>, and don&#8217;t forget to check out our previous <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-6-2022\/\" target=\"_blank\">December<\/a> and <a rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\" href=\"https:\/\/any.run\/cybersecurity-blog\/release-notes-november-16-2022\/\" target=\"_blank\">November <\/a>updates!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>More organizations are starting to use the latest versions of Windows, and it is worth using the same system fingerprint to detect threats more accurately. And today, we reveal a new update on the service exactly for this case. Here is a new addition to the ANY.RUN\u2019s virtual machine \u2013 Windows&nbsp;11 operating system.&nbsp; Update overview: [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":4099,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[57,55,56],"class_list":["post-4124","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-service-updates","tag-anyrun","tag-release","tag-update"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.10 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Release notes December 14, 2022 - ANY.RUN&#039;s Cybersecurity Blog<\/title>\n<meta name=\"description\" content=\"ANY.RUN has updated the service with a new release on the 14th of December. Windows 11: investigate threats and vulnerabilities that target this OS version.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"ANY.RUN\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/\"},\"author\":{\"name\":\"ANY.RUN\",\"@id\":\"https:\/\/any.run\/\"},\"headline\":\"Release notes December 14, 2022\",\"datePublished\":\"2022-12-14T07:50:16+00:00\",\"dateModified\":\"2022-12-21T06:40:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/\"},\"wordCount\":373,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/any.run\/\"},\"keywords\":[\"ANYRUN\",\"release\",\"update\"],\"articleSection\":[\"Service Updates\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/\",\"url\":\"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/\",\"name\":\"Release notes December 14, 2022 - ANY.RUN&#039;s Cybersecurity Blog\",\"isPartOf\":{\"@id\":\"https:\/\/any.run\/\"},\"datePublished\":\"2022-12-14T07:50:16+00:00\",\"dateModified\":\"2022-12-21T06:40:14+00:00\",\"description\":\"ANY.RUN has updated the service with a new release on the 14th of December. Windows 11: investigate threats and vulnerabilities that target this OS version.\",\"breadcrumb\":{\"@id\":\"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/any.run\/cybersecurity-blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Service Updates\",\"item\":\"https:\/\/any.run\/cybersecurity-blog\/category\/service-updates\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Release notes December 14, 2022\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/any.run\/\",\"url\":\"https:\/\/any.run\/\",\"name\":\"ANY.RUN&#039;s Cybersecurity Blog\",\"description\":\"Cybersecurity Blog covers topics for experienced professionals as well as for those new to it.\",\"publisher\":{\"@id\":\"https:\/\/any.run\/\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/any.run\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/any.run\/\",\"name\":\"ANY.RUN\",\"url\":\"https:\/\/any.run\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/any.run\/\",\"url\":\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2020\/08\/ANYRUN-Icon.svg\",\"contentUrl\":\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2020\/08\/ANYRUN-Icon.svg\",\"width\":1,\"height\":1,\"caption\":\"ANY.RUN\"},\"image\":{\"@id\":\"https:\/\/any.run\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/www.any.run\/\",\"https:\/\/twitter.com\/anyrun_app\",\"https:\/\/www.linkedin.com\/company\/30692044\",\"https:\/\/www.youtube.com\/channel\/UCOgCPho7lzmH7m6fPNlukrQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/any.run\/\",\"name\":\"ANY.RUN\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/any.run\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/c4ce3a6c672056b4a8cd6b0110782215?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/c4ce3a6c672056b4a8cd6b0110782215?s=96&d=mm&r=g\",\"caption\":\"ANY.RUN\"},\"url\":\"https:\/\/any.run\/cybersecurity-blog\/author\/a-bespalova\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Release notes December 14, 2022 - ANY.RUN&#039;s Cybersecurity Blog","description":"ANY.RUN has updated the service with a new release on the 14th of December. Windows 11: investigate threats and vulnerabilities that target this OS version.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/","twitter_misc":{"Written by":"ANY.RUN","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/#article","isPartOf":{"@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/"},"author":{"name":"ANY.RUN","@id":"https:\/\/any.run\/"},"headline":"Release notes December 14, 2022","datePublished":"2022-12-14T07:50:16+00:00","dateModified":"2022-12-21T06:40:14+00:00","mainEntityOfPage":{"@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/"},"wordCount":373,"commentCount":0,"publisher":{"@id":"https:\/\/any.run\/"},"keywords":["ANYRUN","release","update"],"articleSection":["Service Updates"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/","url":"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/","name":"Release notes December 14, 2022 - ANY.RUN&#039;s Cybersecurity Blog","isPartOf":{"@id":"https:\/\/any.run\/"},"datePublished":"2022-12-14T07:50:16+00:00","dateModified":"2022-12-21T06:40:14+00:00","description":"ANY.RUN has updated the service with a new release on the 14th of December. Windows 11: investigate threats and vulnerabilities that target this OS version.","breadcrumb":{"@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-14-2022\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/any.run\/cybersecurity-blog\/"},{"@type":"ListItem","position":2,"name":"Service Updates","item":"https:\/\/any.run\/cybersecurity-blog\/category\/service-updates\/"},{"@type":"ListItem","position":3,"name":"Release notes December 14, 2022"}]},{"@type":"WebSite","@id":"https:\/\/any.run\/","url":"https:\/\/any.run\/","name":"ANY.RUN&#039;s Cybersecurity Blog","description":"Cybersecurity Blog covers topics for experienced professionals as well as for those new to it.","publisher":{"@id":"https:\/\/any.run\/"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/any.run\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/any.run\/","name":"ANY.RUN","url":"https:\/\/any.run\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/any.run\/","url":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2020\/08\/ANYRUN-Icon.svg","contentUrl":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2020\/08\/ANYRUN-Icon.svg","width":1,"height":1,"caption":"ANY.RUN"},"image":{"@id":"https:\/\/any.run\/"},"sameAs":["https:\/\/www.facebook.com\/www.any.run\/","https:\/\/twitter.com\/anyrun_app","https:\/\/www.linkedin.com\/company\/30692044","https:\/\/www.youtube.com\/channel\/UCOgCPho7lzmH7m6fPNlukrQ"]},{"@type":"Person","@id":"https:\/\/any.run\/","name":"ANY.RUN","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/any.run\/","url":"https:\/\/secure.gravatar.com\/avatar\/c4ce3a6c672056b4a8cd6b0110782215?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c4ce3a6c672056b4a8cd6b0110782215?s=96&d=mm&r=g","caption":"ANY.RUN"},"url":"https:\/\/any.run\/cybersecurity-blog\/author\/a-bespalova\/"}]}},"_links":{"self":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts\/4124"}],"collection":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/comments?post=4124"}],"version-history":[{"count":1,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts\/4124\/revisions"}],"predecessor-version":[{"id":4125,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts\/4124\/revisions\/4125"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/media\/4099"}],"wp:attachment":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/media?parent=4124"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/categories?post=4124"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/tags?post=4124"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}