General
-
Target
GTA V HACK LOADER.exe
-
Size
1.1MB
-
Sample
220711-knc87sffbp
-
MD5
78b4463a2bfb8006af24ba3b5e5f5ecd
-
SHA1
c970d398489d07214ccb5f5a3fe623a749fa82b7
-
SHA256
075c65d7a64fafe66c002d27d35dc359429ec00808a6ad222fdc51b58bd00da0
-
SHA512
6c3f0c872dc1fc1224a89316f5d3b18a6a08535b6f85c578951c61967572a2783debd779895a6c0adee4bbd4607ab23ca5df310963ff3634865842c998bd8141
Static task
static1
Behavioral task
behavioral1
Sample
GTA V HACK LOADER.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
GTA V HACK LOADER.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
redline
62.204.41.141:24758
-
auth_value
e175ba0fcadafb575694f32d59147a70
Targets
-
-
Target
GTA V HACK LOADER.exe
-
Size
1.1MB
-
MD5
78b4463a2bfb8006af24ba3b5e5f5ecd
-
SHA1
c970d398489d07214ccb5f5a3fe623a749fa82b7
-
SHA256
075c65d7a64fafe66c002d27d35dc359429ec00808a6ad222fdc51b58bd00da0
-
SHA512
6c3f0c872dc1fc1224a89316f5d3b18a6a08535b6f85c578951c61967572a2783debd779895a6c0adee4bbd4607ab23ca5df310963ff3634865842c998bd8141
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
YTStealer payload
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-