Resubmissions

31-03-2023 23:15

230331-28yt3sec63 6

31-03-2023 23:09

230331-25cgnsec34 6

Analysis

  • max time kernel
    25s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    31-03-2023 23:09

General

  • Target

    IGG-REDCON.v1.3.0/SmartSteamEmu64.dll

  • Size

    6.1MB

  • MD5

    04a0ff25eab839c4272a508e1dcb28d1

  • SHA1

    1e47389e33ed70db79973d976305421a6c83d414

  • SHA256

    37b19395f2ddf9414d053aa6db765142ca06a7f05e847e342fdb5d7ebf56cba7

  • SHA512

    80df5138c3f84750becaab9a7558314e3053ff97368f91eb8cd91a77e8b528e1bf0dc120f92dac1372d67b8dcee3a2ca325fe741aaa2a98d9aed085a9e0fa55a

  • SSDEEP

    49152:Hf5dPmWeIdxYOJjt98NMMSbZEE0ROeY+1s6LR9IuJPxI9tdUvS2Bb1ptKK0Qupk:HfVbsNGZEEk1lJPjptKK0DKAd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 14 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\IGG-REDCON.v1.3.0\SmartSteamEmu64.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1496-54-0x000007FEBD0D0000-0x000007FEBD0E0000-memory.dmp
    Filesize

    64KB

  • memory/1496-55-0x00000000371D0000-0x00000000371E0000-memory.dmp
    Filesize

    64KB