Analysis
-
max time kernel
137s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
09-11-2024 16:28
General
-
Target
CSGO FREE HACK.exe
-
Size
587KB
-
MD5
19ccde66d64539ba78e681bbd037b88f
-
SHA1
e67a1f8f13caad85c34894124ad588ab6a5452a8
-
SHA256
26380f65701264b2ad7c6e7731d1cac383319cb9ba64b921c9ecb27970089fb1
-
SHA512
e96247652abf3974eb3ad9b1b68078c4b1ca1d715ca31a62939deca1019f2115d9c86f85c1e19bd909b09335c53621052a10e206d25585974dfd5195df017fff
-
SSDEEP
12288:TkoWRkGj5eA1Go7lVNkfq08KTZPqSA5HsVVbO/F9uDDm/:LYku13lw
Malware Config
Extracted
redline
@Navi_Gator
136.244.80.139:40533
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 5 IoCs
-
Redline family
-
SectopRAT
SectopRAT is a remote access trojan first seen in November 2019.
-
SectopRAT payload 5 IoCs
-
Sectoprat family
-
Suspicious use of SetThreadContext 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 13 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\CSGO FREE HACK.exe"C:\Users\Admin\AppData\Local\Temp\CSGO FREE HACK.exe"1⤵
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\CSGO FREE HACK.exe"C:\Users\Admin\AppData\Local\Temp\CSGO FREE HACK.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\CSGO FREE HACK.exe"C:\Users\Admin\AppData\Local\Temp\CSGO FREE HACK.exe"2⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
120KB
-
Filesize
4KB
-
Filesize
6.9MB
-
Filesize
120KB
-
Filesize
120KB
-
Filesize
120KB
-
Filesize
6.9MB
-
Filesize
120KB
-
Filesize
6.9MB
-
Filesize
120KB
-
Filesize
120KB
-
Filesize
4KB
-
Filesize
6.9MB
-
Filesize
616KB
-
Filesize
6.9MB