Overview

overview

10

Static

static

Mopes Hack.exe

windows7_x64

10

Mopes Hack.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Mopes Hack.exe

  • Size

    326KB

  • Sample

    211015-1saa4scchp

  • MD5

    83e60135c26872fa756fcb26553be6cb

  • SHA1

    3df616b4b4df6faba9373f78dac9a277c07cb26a

  • SHA256

    e4331c8eab3a20db74f66603fac6ff6a3faca677176a4015dea2a4665fb3f13f

  • SHA512

    10834fa839db185629dfce92da2334d4c69dc05041ee045c08610085febeebac054f6c5b64e5a1e259ca06144e6bdc0a91a56acbba130dd6e0aeeb8cfbb67b26

Score
10/10
redline@silistrii_lztinfostealer

Malware Config

Extracted

Family

redline

Botnet

@silistrii_LZT

C2

arujuyrana.xyz:80

Targets

    • Target

      Mopes Hack.exe

    • Size

      326KB

    • MD5

      83e60135c26872fa756fcb26553be6cb

    • SHA1

      3df616b4b4df6faba9373f78dac9a277c07cb26a

    • SHA256

      e4331c8eab3a20db74f66603fac6ff6a3faca677176a4015dea2a4665fb3f13f

    • SHA512

      10834fa839db185629dfce92da2334d4c69dc05041ee045c08610085febeebac054f6c5b64e5a1e259ca06144e6bdc0a91a56acbba130dd6e0aeeb8cfbb67b26

    Score
    10/10
    redline@silistrii_lztinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine Payload

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks