Overview

overview

7

Static

static

3

RedButton.exe

windows10-2004-x64

7

RedButton.exe

windows11-ltsc_2024-x64

7

$DESKTOP/D...ux.url

windows10-2004-x64

1

$DESKTOP/D...ux.url

windows11-ltsc_2024-x64

1

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDIR/INetC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$SMPROGRAM...ux.url

windows10-2004-x64

1

$SMPROGRAM...ux.url

windows11-ltsc_2024-x64

1

Uninstall.exe

windows10-2004-x64

7

Uninstall.exe

windows11-ltsc_2024-x64

7

redbutton.exe

windows10-2004-x64

3

redbutton.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    RedButton.zip
  • Size 1.0MB
  • Sample260710-pcfbmsa17q
  • SHA256 507fd9fdd7eef694c78feeee6ad8827839ef0fdd8ef98918ce67e5ff67908e4a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryinstaller

Malware Config

Targets

    • Target
      RedButton.exe
    • Size 1.1MB
    • SHA256 2603c2c4d4538e50d637cecf8c7faaeb84a73bc6d2a58fc37aa6054f44263186
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2
    • Target
      $DESKTOP/Desktop Lux.url
    • Size 107B
    • SHA256 159ea6bb92e64ef0155107a354798b3c02f9120a7c8f4c67f53cd784017805d5
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/INetC.dll
    • Size 21KB
    • SHA256 2d5d89025911e2e273f90f393624be4819641dbee1606de792362e442e54612f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/InstallOptions.dll
    • Size 14KB
    • SHA256 0e014352b64abc431d97460d79757cbafbf6ba997c08b608c294e1f582af269a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      $PLUGINSDIR/LangDLL.dll
    • Size 5KB
    • SHA256 4e72c8b4d36f128b25281440e59e39af7ec2080d02e024f35ac413d769d91f39
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      $SMPROGRAMS/Desktop Lux.url
    • Size 107B
    • SHA256 159ea6bb92e64ef0155107a354798b3c02f9120a7c8f4c67f53cd784017805d5
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      Uninstall.exe
    • Size 73KB
    • SHA256 64c296fb8b5a94ca54587ca42466d76c77dddf3d4504d0022153bca15ee0cc29
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryinstaller

    • Deletes itself

    • Executes dropped EXE

    behavioral13behavioral14
    • Target
      redbutton.exe
    • Size 2.5MB
    • SHA256 176f28605f148650f5ce34a465eed8e3c74111c9579aab9cda31ed1290ac951c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral15behavioral16

MITRE ATT&CK Enterprise v16

Tasks