Analysis
- max time kernel
898s - max time network
601s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
11/08/2026, 22:10
General
- Target Terraria/OnlineFix.dll
- Size 8.9MB
- Sample260811-13ectadr5y
- SHA256 7b770f41bc531de7edf3437c1c80e6029b72093d7db4307e03bcb2e2b027fb29
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Terraria\OnlineFix.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Terraria\OnlineFix.dll,#12⤵
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2096-0-0x0000000073A30000-0x0000000074943000-memory.dmp