Resubmissions
13/08/2026, 08:19
260813-j79wvaveqa13/08/2026, 08:16
260813-j57npsvenc13/08/2026, 07:29
260813-jbrqdsvalh713/08/2026, 07:24
260813-h8lpzahe277Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
13/08/2026, 07:29
General
- Target mango.exe
- Size 1.8MB
- Sample260813-jbrqdsvalh
- SHA256 7b7ffdabadd1e1ea05600f00d17abf7032e65873bc833a50555b7cd8b26c8a17
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\mango.exe"C:\Users\Admin\AppData\Local\Temp\mango.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
SiticoneDotNetRT64.dll
memory/4368-0-0x0000011A3C670000-0x0000011A3C836000-memory.dmp
memory/4368-1-0x0000011A56F60000-0x0000011A57134000-memory.dmp
memory/4368-2-0x0000011A56F50000-0x0000011A56F60000-memory.dmp
memory/4368-3-0x0000011A57BC0000-0x0000011A57D68000-memory.dmp
memory/4368-41-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-10-0x00007FFD5E0F0000-0x00007FFD5E117000-memory.dmp
memory/4368-55-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-51-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-39-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-37-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-35-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-33-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-31-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-30-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-27-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-13-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-12-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-11-0x00007FFD5D560000-0x00007FFD5D6AE000-memory.dmp
memory/4368-83-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-81-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-89-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-117-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-135-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-133-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-131-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-129-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-127-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-125-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-123-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-121-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-119-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-115-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-113-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-111-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-109-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-107-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-105-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-103-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-101-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-99-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-97-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-95-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-93-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-91-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-87-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-85-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-79-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-77-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-75-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-73-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-71-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-69-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-67-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-66-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-63-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-62-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-59-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-57-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-53-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-49-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-47-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-45-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-43-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-25-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-23-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-22-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-19-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-17-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-15-0x0000011A57BC0000-0x0000011A57D64000-memory.dmp
memory/4368-3242-0x0000011A56F50000-0x0000011A56F60000-memory.dmp
memory/4368-3783-0x00007FFD5E0F0000-0x00007FFD5E117000-memory.dmp
memory/4368-11028-0x0000011A3CCC0000-0x0000011A3CCD0000-memory.dmp
memory/4368-11030-0x0000011A56F50000-0x0000011A56F60000-memory.dmp
memory/4368-11029-0x0000011A56F50000-0x0000011A56F60000-memory.dmp
memory/4368-11031-0x0000011A56F50000-0x0000011A56F60000-memory.dmp
memory/4368-11032-0x0000011A56F50000-0x0000011A56F60000-memory.dmp
memory/4368-11033-0x0000011A56F50000-0x0000011A56F60000-memory.dmp
memory/4368-11034-0x0000011A56F50000-0x0000011A56F60000-memory.dmp
memory/4368-11035-0x0000011A56F50000-0x0000011A56F60000-memory.dmp
memory/4368-11036-0x0000011A56F50000-0x0000011A56F60000-memory.dmp
memory/4368-11037-0x0000011A56F50000-0x0000011A56F60000-memory.dmp
memory/4368-11038-0x0000011A56F50000-0x0000011A56F60000-memory.dmp