Analysis

  • max time kernel
    0s
  • max time network
    2s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-12-2023 02:36

General

  • Target

    53e5fc2375ca90b7345c7533aa34e7cb.dll

  • Size

    38KB

  • MD5

    53e5fc2375ca90b7345c7533aa34e7cb

  • SHA1

    e52901f32031dea26e087ea28a22b11324fe2616

  • SHA256

    5642ad44f0697e5c7d1c09a862bc32bd0e7da73e8ed717899b111fe5ce61a713

  • SHA512

    9512625afdc6f9547af0bd5d47661c2f3cf2cac7abec50393b906bfc9b01ea7878260db49a41cb69c1aadbac65cd38b203faa94e0cfb51e40dcb7e6c801b9fb4

  • SSDEEP

    768:fESk4VQoQCC3cHHrnZOVSJbNZoMzODqY3PnwZDZe7nmoot9kq3W33WuZEcSfuC:fDk1RCCMHVOeH3OvwZF+nct9kqGHWuYp

Score
10/10

Malware Config

Signatures

  • Detect magniber ransomware 1 IoCs
  • Magniber Ransomware

    Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\53e5fc2375ca90b7345c7533aa34e7cb.dll,#1
    1⤵
      PID:4092

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2652-12-0x0000022C01120000-0x0000022C01125000-memory.dmp

      Filesize

      20KB

    • memory/4092-10-0x0000025131410000-0x0000025131411000-memory.dmp

      Filesize

      4KB

    • memory/4092-4-0x0000025131380000-0x0000025131381000-memory.dmp

      Filesize

      4KB

    • memory/4092-6-0x00000251313A0000-0x00000251313A1000-memory.dmp

      Filesize

      4KB

    • memory/4092-7-0x00000251313B0000-0x00000251313B1000-memory.dmp

      Filesize

      4KB

    • memory/4092-11-0x0000025131420000-0x0000025131421000-memory.dmp

      Filesize

      4KB

    • memory/4092-0-0x00000251314A0000-0x00000251319CF000-memory.dmp

      Filesize

      5.2MB

    • memory/4092-9-0x0000025131400000-0x0000025131401000-memory.dmp

      Filesize

      4KB

    • memory/4092-8-0x00000251313F0000-0x00000251313F1000-memory.dmp

      Filesize

      4KB

    • memory/4092-3-0x0000025131370000-0x0000025131371000-memory.dmp

      Filesize

      4KB

    • memory/4092-2-0x0000025131360000-0x0000025131361000-memory.dmp

      Filesize

      4KB

    • memory/4092-1-0x0000025131350000-0x0000025131351000-memory.dmp

      Filesize

      4KB

    • memory/4092-5-0x0000025131390000-0x0000025131391000-memory.dmp

      Filesize

      4KB