cad0e84b5c7a0aa2f60edecd9edd8a0db0fcdf439de63db7f1a4a06f3ebcf09e

Submit
Reports

Overview

overview

Static

static

IGG-REDCON...02.dll

windows7-x64

IGG-REDCON...02.dll

windows10-2004-x64

IGG-REDCON...02.exe

windows7-x64

IGG-REDCON...02.exe

windows10-2004-x64

IGG-REDCON...CO.url

windows7-x64

IGG-REDCON...CO.url

windows10-2004-x64

IGG-REDCON...OM.url

windows7-x64

IGG-REDCON...OM.url

windows10-2004-x64

IGG-REDCON...ER.exe

windows7-x64

IGG-REDCON...ER.exe

windows10-2004-x64

IGG-REDCON...on.exe

windows7-x64

IGG-REDCON...on.exe

windows10-2004-x64

IGG-REDCON...mu.dll

windows7-x64

IGG-REDCON...mu.dll

windows10-2004-x64

IGG-REDCON...ll.dll

windows7-x64

IGG-REDCON...ll.dll

windows10-2004-x64

IGG-REDCON...64.dll

windows7-x64

IGG-REDCON...64.dll

windows10-2004-x64

IGG-REDCON...ay.dll

windows7-x64

IGG-REDCON...ay.dll

windows10-2004-x64

IGG-REDCON...ay.dll

windows7-x64

IGG-REDCON...ay.dll

windows10-2004-x64

IGG-REDCON...64.dll

windows7-x64

IGG-REDCON...64.dll

windows10-2004-x64

IGG-REDCON...lp.dll

windows7-x64

IGG-REDCON...lp.dll

windows10-2004-x64

IGG-REDCON...10.dll

windows7-x64

IGG-REDCON...10.dll

windows10-2004-x64

IGG-REDCON...10.dll

windows7-x64

IGG-REDCON...10.dll

windows10-2004-x64

Resubmissions

31-03-2023 23:15

230331-28yt3sec63 6

31-03-2023 23:09

230331-25cgnsec34 6

Analysis

max time kernel
38s
max time network
47s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
31-03-2023 23:09

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

IGG-REDCON.v1.3.0/CrashRpt1402.dll

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

IGG-REDCON.v1.3.0/CrashRpt1402.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

IGG-REDCON.v1.3.0/CrashSender1402.exe

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

IGG-REDCON.v1.3.0/CrashSender1402.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

IGG-REDCON.v1.3.0/GAMESTORRENT.CO.url

Resource

win7-20230220-en

evasion trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

IGG-REDCON.v1.3.0/GAMESTORRENT.CO.url

Resource

win10v2004-20230220-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral7

Sample

IGG-REDCON.v1.3.0/IGG-GAMES.COM.url

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

IGG-REDCON.v1.3.0/IGG-GAMES.COM.url

Resource

win10v2004-20230220-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral9

Sample

IGG-REDCON.v1.3.0/LAUNCHER.exe

Resource

win7-20230220-en

bootkit persistence

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral10

Sample

IGG-REDCON.v1.3.0/LAUNCHER.exe

Resource

win10v2004-20230220-en

bootkit persistence

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral11

Sample

IGG-REDCON.v1.3.0/Redcon.exe

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

IGG-REDCON.v1.3.0/Redcon.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

IGG-REDCON.v1.3.0/SmartSteamEmu.dll

Resource

win7-20230220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

IGG-REDCON.v1.3.0/SmartSteamEmu.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

IGG-REDCON.v1.3.0/SmartSteamEmu/Plugins/SSEFirewall.dll

Resource

win7-20230220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

IGG-REDCON.v1.3.0/SmartSteamEmu/Plugins/SSEFirewall.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

IGG-REDCON.v1.3.0/SmartSteamEmu/Plugins/SSEFirewall64.dll

Resource

win7-20230220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

IGG-REDCON.v1.3.0/SmartSteamEmu/Plugins/SSEFirewall64.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

IGG-REDCON.v1.3.0/SmartSteamEmu/Plugins/x64/SSEOverlay.dll

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

IGG-REDCON.v1.3.0/SmartSteamEmu/Plugins/x64/SSEOverlay.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

IGG-REDCON.v1.3.0/SmartSteamEmu/Plugins/x86/SSEOverlay.dll

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

IGG-REDCON.v1.3.0/SmartSteamEmu/Plugins/x86/SSEOverlay.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

IGG-REDCON.v1.3.0/SmartSteamEmu64.dll

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

IGG-REDCON.v1.3.0/SmartSteamEmu64.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

IGG-REDCON.v1.3.0/dbghelp.dll

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

IGG-REDCON.v1.3.0/dbghelp.dll

Resource

win10v2004-20230221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

IGG-REDCON.v1.3.0/msvcp110.dll

Resource

win7-20230220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

IGG-REDCON.v1.3.0/msvcp110.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

IGG-REDCON.v1.3.0/msvcr110.dll

Resource

win7-20230220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

IGG-REDCON.v1.3.0/msvcr110.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

2 signatures

150 seconds

Report Analysis Logs

General

Target

IGG-REDCON.v1.3.0/CrashRpt1402.dll
Size

149KB
MD5

cb8615fdc88807fa810f0dd037e70326
SHA1

179acc4ffc4baca4860e2365074839cb6785f1d2
SHA256

1342ac88b306ab4b4c269fcaa2434449a0932ac5b8805666751d4fdee26fd32b
SHA512

31e1dfb0272e41737f1deea57e2775541ded1326a8c65a8dcd132281180de36741b5976a311eb0e0d25fda76ec32a63ce3e4d94eca1c3b04d564db5dcbe5fa09
SSDEEP

3072:wCYt1vpEjwxfDE0uPWR8BZCxR3lI230OiqPrxIqGYG:kt1vKjw1g0ueNH9JIqc

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 4952 wrote to memory of 5036	4952	rundll32.exe	rundll32.exe
PID 4952 wrote to memory of 5036	4952	rundll32.exe	rundll32.exe
PID 4952 wrote to memory of 5036	4952	rundll32.exe	rundll32.exe

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\IGG-REDCON.v1.3.0\CrashRpt1402.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\IGG-REDCON.v1.3.0\CrashRpt1402.dll,#1
2⤵
PID:5036

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads