Analysis

  • max time kernel
    0s
  • max time network
    7s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-12-2023 04:44

General

  • Target

    a3e7152abd213f303c1561aa20ed9cea.dll

  • Size

    38KB

  • MD5

    a3e7152abd213f303c1561aa20ed9cea

  • SHA1

    0cfb6ac5f567c4dd3e9ebe741c2b8b0e19cb243e

  • SHA256

    8ab78bc8884b9de573a3dc19e7fc206e925f643aee3f152d19e8d1caa90b6312

  • SHA512

    854dad9d639cb4c9860c7dcd2d1bb7204ce3efe0a5bc0521d37a61e7ef3787a8334620d718ec2abdbbd077122c008273ce29cf1382af45d8411c431f5cf2e777

  • SSDEEP

    768:bL2WWrr4WdC5pqndJgr8q39GGL3RqL9Q1VW028JQyt3uh11yCg:GdC5pqndJIHtGCE9Q1rRxIM

Score
10/10

Malware Config

Signatures

  • Detect magniber ransomware 1 IoCs
  • Magniber Ransomware

    Ransomware family widely seen in Asia being distributed by the Magnitude exploit kit.

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\a3e7152abd213f303c1561aa20ed9cea.dll,#1
    1⤵
      PID:4912

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4912-0-0x000001E91D6B0000-0x000001E91DCF9000-memory.dmp

      Filesize

      6.3MB

    • memory/4912-1-0x000001E91D650000-0x000001E91D651000-memory.dmp

      Filesize

      4KB

    • memory/4912-2-0x000001E91D660000-0x000001E91D661000-memory.dmp

      Filesize

      4KB

    • memory/4912-3-0x000001E91D670000-0x000001E91D671000-memory.dmp

      Filesize

      4KB

    • memory/4912-11-0x000001E91DD80000-0x000001E91DD81000-memory.dmp

      Filesize

      4KB

    • memory/4912-10-0x000001E91DD70000-0x000001E91DD71000-memory.dmp

      Filesize

      4KB

    • memory/4912-9-0x000001E91DD60000-0x000001E91DD61000-memory.dmp

      Filesize

      4KB

    • memory/4912-8-0x000001E91DD50000-0x000001E91DD51000-memory.dmp

      Filesize

      4KB

    • memory/4912-7-0x000001E91DD10000-0x000001E91DD11000-memory.dmp

      Filesize

      4KB

    • memory/4912-6-0x000001E91DD00000-0x000001E91DD01000-memory.dmp

      Filesize

      4KB

    • memory/4912-4-0x000001E91D680000-0x000001E91D681000-memory.dmp

      Filesize

      4KB

    • memory/4912-5-0x000001E91D690000-0x000001E91D691000-memory.dmp

      Filesize

      4KB