Analysis
-
max time kernel
131s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
05-09-2024 12:18
Static task
static1
Behavioral task
behavioral1
Sample
RedEngine/RedEngine.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
RedEngine/RedEngine.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
RedEngine/libEGL.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
RedEngine/libEGL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
RedEngine/libGLESv2.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
RedEngine/libGLESv2.dll
Resource
win10v2004-20240802-en
General
-
Target
RedEngine/libEGL.dll
-
Size
469KB
-
MD5
2a568dc1f848b2948dfd90c8ebeb58c6
-
SHA1
e765ca8946ce091651c6722c650d9ad5edfeb5d5
-
SHA256
c00285c0174024739997898e98444deb4cbfe6b571cca69ca3bf8e5ab3ea5bbe
-
SHA512
a6ce4ead89933d32ea24766f887655ee5894ef1813faf97ebb2191a775488ba2fd77bcb4aedefc273ef85f5a93a9a5dd3d35b213a52d95b0cc4111708d9fcee5
-
SSDEEP
3072:4kgdNXYPuSHGjFXVYbAQSIoU8w1Z5iErbFdWE7D6i/wZJothADZX+Lcq7gv+xt4f:47Vl/HxUniSbFdH1/wXFufMG9x2qPz
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\RedEngine\libEGL.dll,#11⤵PID:3620
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4128,i,16316361669272684588,6171287487746154806,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:81⤵PID:3212