General

  • Target

    https://download1510.mediafire.com/uedsuo1ku55g/5wt2ty9e49ez524/FORTNITE+modmenu+2022.rar

  • Sample

    230106-c5b4gaea77

Malware Config

Extracted

Family

redline

C2

45.15.157.131:36457

Attributes
  • auth_value

    db89dcb2a85de4f6239e3bcd08247280

Targets

    • Target

      https://download1510.mediafire.com/uedsuo1ku55g/5wt2ty9e49ez524/FORTNITE+modmenu+2022.rar

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks