Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

RDR2CHEAT/...er.exe

windows7-x64

10

RDR2CHEAT/...er.exe

windows10-2004-x64

10

RDR2CHEAT/...op.dll

windows7-x64

1

RDR2CHEAT/...op.dll

windows10-2004-x64

1

RDR2CHEAT/...op.dll

windows7-x64

1

RDR2CHEAT/...op.dll

windows10-2004-x64

1

RDR2CHEAT/...op.dll

windows7-x64

1

RDR2CHEAT/...op.dll

windows10-2004-x64

1

RDR2CHEAT/...op.dll

windows7-x64

1

RDR2CHEAT/...op.dll

windows10-2004-x64

1

RDR2CHEAT/...op.dll

windows7-x64

1

RDR2CHEAT/...op.dll

windows10-2004-x64

1

RDR2CHEAT/...op.dll

windows7-x64

1

RDR2CHEAT/...op.dll

windows10-2004-x64

1

RDR2CHEAT/...op.dll

windows7-x64

1

RDR2CHEAT/...op.dll

windows10-2004-x64

1

RDR2CHEAT/...op.dll

windows7-x64

1

RDR2CHEAT/...op.dll

windows10-2004-x64

1

RDR2CHEAT/...op.dll

windows7-x64

1

RDR2CHEAT/...op.dll

windows10-2004-x64

1

RDR2CHEAT/...op.dll

windows7-x64

1

RDR2CHEAT/...op.dll

windows10-2004-x64

1

RDR2CHEAT/...te.dll

windows7-x64

1

RDR2CHEAT/...te.dll

windows10-2004-x64

1

RDR2CHEAT/...te.dll

windows7-x64

1

RDR2CHEAT/...te.dll

windows10-2004-x64

1

RDR2CHEAT/...te.dll

windows7-x64

1

RDR2CHEAT/...te.dll

windows10-2004-x64

1

RDR2CHEAT/...te.dll

windows7-x64

1

RDR2CHEAT/...te.dll

windows10-2004-x64

1

RDR2CHEAT/...te.dll

windows7-x64

1

RDR2CHEAT/...te.dll

windows10-2004-x64

1

Resubmissions

11/10/2023, 00:51

231011-a7gevsbe37 10

11/10/2023, 00:50

231011-a652tshd41 10

31/01/2023, 09:06

230131-k21xeshe3z 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RDR2CHEAT.rar

  • Size

    20.9MB

  • Sample

    231011-a652tshd41

  • MD5

    20d05abd695dc6915265b866cf0e33a3

  • SHA1

    a0cbfdeae1142ff3c98853414e4e0761250b1dda

  • SHA256

    d84ae6a1fe42df7886cbaec78b8433ab93a2ff54b0290754eb7b5315734904bb

  • SHA512

    0d68944aeb3177e2122e097abddd6db875b018b9dc52768a00da3874d7fa47c069b2ad65e1a03cc30125bbd4225d958f8dcfe866e46215f98354382774d98047

  • SSDEEP

    393216:FcL4sxjmi7TmwhPQOqRa0lHjf9YfM6VHPUP/2nyr+dariBA6a/3Js1EEYgY:WjxjvmwuOb0lHz9YfnPA+dA7/5suE8

Score
10/10
redlinefondnessinfostealer

Malware Config

Extracted

Family

redline

Botnet

FONDNESS

C2

89.22.234.180:40608

Attributes
  • auth_value

    8dd80c7c3aad106b12e2f6a3afd7a250

Targets

    • Target

      RDR2CHEAT/PrimeXLauncher.exe

    • Size

      159KB

    • MD5

      0c2de2a3c96398428b0ce53ee8be212f

    • SHA1

      348a9089ecdc242b2d729f642a70794d74c9a06b

    • SHA256

      1331d10811b5b02f55f7a6fa0e957543c2c2ea5c9817518f97905b6038dfed93

    • SHA512

      b767bb3487ddca3bfd8d998b675d149f06473190755d8b0402469ddfebfc4121384bd65107850036b67f72429bd8fca399b9b3ec54f088a49935f20ca5d3f0a3

    • SSDEEP

      3072:OaAzRVKaMvVMLGXVJYkwOQKlTXSRBI1IVZQLv0e0Ut:OaAzRV9MMIF1IVZQLv

    Score
    10/10
    redlinefondnessinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline
    behavioral1behavioral2

    • Target

      RDR2CHEAT/build/net20/x64/SQLite.Interop.dll

    • Size

      1.6MB

    • MD5

      e6dd836cf98ed859511cbe9c53a682a3

    • SHA1

      2432168556b04ce2536c36cb73752ffc4edf0456

    • SHA256

      05195b8445ce85927afbac1c406192c69a7da9aaa122ac8661c4ec2d7d0828eb

    • SHA512

      5644e3ac558edb408dc63fa4db0a84ff3a0f0c4892a5b20a3f691acde32c63f164f69e8cb71dccaba4340c18b20002e400840c48ce4a408829d7a39f9ea76510

    • SSDEEP

      24576:VxA+PvTTe2w0BasEN1yU7A+/g2/ida/T8t0pZ//YkPHC7CAXDNSzvOwPM9:LtTfgyU7A+o2wAT8t0bgke

    Score
    1/10
    behavioral3behavioral4

    • Target

      RDR2CHEAT/build/net20/x86/SQLite.Interop.dll

    • Size

      1.1MB

    • MD5

      abac6d5b3848896e47b92abce9ca235f

    • SHA1

      db2f3e072d6647fb5701764d40f9be64d370ab8e

    • SHA256

      493e81543afccd01c25a622ad7a25765b73d16f838fc8df608ce4b2b0550d623

    • SHA512

      a4e87bd8e3a0a1b0fd11001715b0f0199aa03182e321e18e76b35b9494d4b17f6504fcb1afd522d1c9b8d3e902700c64eb4bbdd98c17a426b4d59560c09e9f87

    • SSDEEP

      24576:Waqcs/OGyh7kFlHNmVOVw49igHrTU/s/O5xPFqqw:6OB2lHhVDrT6n4Z

    Score
    1/10
    behavioral5behavioral6

    • Target

      RDR2CHEAT/build/net40/x64/SQLite.Interop.dll

    • Size

      1.6MB

    • MD5

      99ba1cc59ac3cf71236445774c782a5b

    • SHA1

      0c57880bd2d1d4585667789ed4497550c30c3255

    • SHA256

      656c25b53c13ec6aa605eca0ca196794dad57f601f169d39d3f5fb7510046846

    • SHA512

      4daa80fa210c823beebde191706dad6c2735e16495c0018f7294d3dd8d7316d0814cf45605749709becdd8aafd1686be15e36d846c4efb3087d46f5ed06a7db9

    • SSDEEP

      24576:zgUzpL7YiiFYSNSHZxPCw1NllcvMgQ4AkEzAKD9xTPnf:n7Ow3PCw13lcEVP

    Score
    1/10
    behavioral7behavioral8

    • Target

      RDR2CHEAT/build/net40/x86/SQLite.Interop.dll

    • Size

      1.2MB

    • MD5

      0a6de5fa6ec9a63cabcdd4050daa551b

    • SHA1

      db8cb1009f21c10f2509df1ec0ce736c89a78446

    • SHA256

      29397546eb8dc57f7c0dc4132ca454c0eabb4047eb69eb104baf4603a16829df

    • SHA512

      8755968550fed89235a0d97df8dad807d1bf77198ac3eb354ed6fa258622fe8c7b104116755cdeddfb987801dbc14b5cd08b262031a055928a413ab528d22428

    • SSDEEP

      24576:ovvxkyHje2U7uw3wYgkrNyzqK7dfB/q0qriHzAytKGefcJZnJx:on6mjw7Qkxyt7dZ/q0vzrPx

    Score
    1/10
    behavioral10behavioral9

    • Target

      RDR2CHEAT/build/net45/x64/SQLite.Interop.dll

    • Size

      1.6MB

    • MD5

      b9b2260774712462ff1c6b9f3516de67

    • SHA1

      f64e4be86b29184bbf80629ceafaff917b4650c2

    • SHA256

      0c80e701352d34cb38e4769acb1a86e3875009007eb5a32cdd680facda434e02

    • SHA512

      85ce0e66c49945138ef2861a6c7c12c23ade9dc46c225128819f92ac316f5fe904a2bfc42056064a8e5bba372d1c8ff7b92d43118958813e6f8f1e5202657907

    • SSDEEP

      24576:IwI/ZeTLMOTTDOl6KPFgLkTqTeLtr5X5L22AoP7Y1N6sMRk7/MWn/87pd0PXKqcF:J8MDgHQeLL5L2LPOR+nYpX

    Score
    1/10
    behavioral11behavioral12

    • Target

      RDR2CHEAT/build/net45/x86/SQLite.Interop.dll

    • Size

      1.3MB

    • MD5

      8ee703ae220be11a81d3eaf4eb9106e7

    • SHA1

      db7dc6a2f8887475bea01e7b3612c8d79c3500c1

    • SHA256

      1272e3a910e0c5c6930bfb80e738b5842e447ad42496e3e10abc1380377e45f7

    • SHA512

      4b13b270d175062ac6f69e905a81303089dd0225f4bf7cf149bfc6c54a3ee0ba938729eba00f0ca0bb56790cc8af0c86cac3bc3497791cd7518bbf65db4d6779

    • SSDEEP

      24576:QcbN6B9z+P7j7GA9ZyHAlDvn429TSQ+2f96dpG8MaFXbjxXrVyFNpXO:dNkz+vS8yiv0dcJaFLjtoN

    Score
    1/10
    behavioral13behavioral14

    • Target

      RDR2CHEAT/build/net451/x64/SQLite.Interop.dll

    • Size

      1.6MB

    • MD5

      20bf56090460aa02f2294b4c897f6895

    • SHA1

      55cb7c759f5b5ae4db482b5fdf85ae5dc0a1cd48

    • SHA256

      386d9f73dc2b527327d0b9d8c0a6700b901b7e69d9db35ea5c5ea52354b83a9c

    • SHA512

      36c704f3cea5042ce242b3152a2ec38918adea14a9ae02f943215e3956c83f891ae6e2e4bb3e64480bf0b85e72d941b928d42be253ed49c21391abb6ed6621a1

    • SSDEEP

      24576:vmCYJFdV8lItLyLZhpvVTP52ARPfw0xqrcDfb3wQFZVeXNV2BvPDQDMp8pKQln50:vdYJ3yVb2CPfw9rMW9V2NQQQKC

    Score
    1/10
    behavioral15behavioral16

    • Target

      RDR2CHEAT/build/net451/x86/SQLite.Interop.dll

    • Size

      1.3MB

    • MD5

      9d766cf85c7a5b7d7286633cf8a0474b

    • SHA1

      35b41e7064691080d39f4c66a7f3ab5941e9ebdd

    • SHA256

      30d0c8c8be4397e39acdc8e74d9921a8ee24c6a88411a2eb98eace513e216d36

    • SHA512

      087c918420574642af8dec566648ccaa0e25e3a597b3be8204ff82c40e35a48597640f8ad16f24e657ccd7c5e696ab20fbcfec8ab68775c2f3afaa97ba5f4852

    • SSDEEP

      24576:FNLcdPWtKD6oRX4h65LHgljNEVqSN63ju0bLsKq4oOgnUdavUzy/6xfdwVYekB:QWt6X4gH/X50bkSavUzxFwSB

    Score
    1/10
    behavioral17behavioral18

    • Target

      RDR2CHEAT/build/net46/x64/SQLite.Interop.dll

    • Size

      1.6MB

    • MD5

      7de130ce491d63ecb3920687a84df54a

    • SHA1

      9784983d96036605f4f2b043191cf89be192666d

    • SHA256

      1d534617b38323027a64579a581258a55c3986f5b4b15297126c8a4cef5aa105

    • SHA512

      990b77c346b15357b6c1cdc5c3913c21c1b2fae17678c38e180c9ce1ae6f14d3a7357daf24828966cf94fefd8fdac61ea7a1ccd928724dee37d2ac1721345344

    • SSDEEP

      24576:Bmyw7ozZ/Tsfeb9cnFnI/ydJdex/TfpHpoqkz+Rqlhq1JUIUIya70elxspc:Bmyw1y2Ddc/bDkzmHzUIUIya

    Score
    1/10
    behavioral19behavioral20

    • Target

      RDR2CHEAT/build/net46/x86/SQLite.Interop.dll

    • Size

      1.2MB

    • MD5

      1d5041dc5a86b787d9701b78a9e0b121

    • SHA1

      88873d0af22c924869f8c10c46e9b8f765d9b998

    • SHA256

      4870018813eff9a5b050044c5eb639bb3e536ec1cd3ad03da389b83216c0f4d5

    • SHA512

      65b10e3ed76886d6649b9d7a13d9072cc6ee4026632ad588551020df634d065f30691f62b394da96eaf870226dc8272a04b92648c999fc7329573a9e2383af4b

    • SSDEEP

      24576:PRL4z3OFV7DeRuvUJwOB/7UA22Q0XgGtyPmJAvuC8PD/i7pi/sT5B2LOhW:t4jcJzanPXgGR+uC8sp4q2LX

    Score
    1/10
    behavioral21behavioral22

    • Target

      RDR2CHEAT/lib/net20/System.Data.SQLite.dll

    • Size

      364KB

    • MD5

      618661921045f2c1f85ce76d57dd1beb

    • SHA1

      f858c797d72cd3f92a0ce4637dd77a9cdf2d7e02

    • SHA256

      1a483745e68fd4f7261f44c22fbab9cf92fd70d2c727018577cde36edc923836

    • SHA512

      9e5f64d2c5024aa03b414dde0af0845dde2e2e47430b7039b1dcfa57df36f3626afdf00409dcc0b0adad33c1485766e4cf6b469b5f0886a3fd6d203d42dfcce4

    • SSDEEP

      6144:lG5H1oF2z4Lou3FNFfcaFeFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchFFc6:lcCFNFfcaFeFOFwcGF6cmFWc0FWc8cIL

    Score
    1/10
    behavioral23behavioral24

    • Target

      RDR2CHEAT/lib/net40/System.Data.SQLite.dll

    • Size

      355KB

    • MD5

      fd3874b6c0733eabe7e9c8df6cfb4d6b

    • SHA1

      8f75a506baea72293485bfa3f77d221957011cb2

    • SHA256

      93bb35bb3bc74bfa8016eb335a18fd89a8b3678bd4073108122d5d9af94e655e

    • SHA512

      169a1eb4952f037d6dbd53a9b74e6671770a2c6d000776c497c34586c494f616c3b9325e1fe75fea00bc23268d02a8c5f895bb05290f9d159c8e7d8087d3f80d

    • SSDEEP

      6144:7plhytE7KivmenMk0Tm1udZ9KxTNwzo57QFNFfcaFeFOFwcGF6cmFWc0FWc8cIck:tKkmeo9FNFfcaFeFOFwcGF6cmFWc0FWV

    Score
    1/10
    behavioral25behavioral26

    • Target

      RDR2CHEAT/lib/net45/System.Data.SQLite.dll

    • Size

      355KB

    • MD5

      17bb52713d75f8b334a311bd27cf5f23

    • SHA1

      24446d9f4e639454f36b6edcc187834a059b6082

    • SHA256

      6c156f7cf30a6c1e2538e8ee8744f641a9270e9b3a1d5b13c8486ea8b8cd5b03

    • SHA512

      33934dd07f98c87b4c86d0c60c64bfe5fa5bcd74f314af9069a0fcaa9a3bfefe331ab751652ced5fa100a490088f063421f0be14a7c6e995665c0ef5d01c168c

    • SSDEEP

      6144:bplhytE7KivmenMk0Tm1udZ9KxTNwzo57QFNFfcaFeFOFwcGF6cmFWc0FWc8cIcR:NKkmeo9FNFfcaFeFOFwcGF6cmFWc0FWt

    Score
    1/10
    behavioral27behavioral28

    • Target

      RDR2CHEAT/lib/net451/System.Data.SQLite.dll

    • Size

      355KB

    • MD5

      5c1392fa9dd90f66cffd7e111568e5ea

    • SHA1

      09581a7af51ed183f4c698f36588dd03cc483f38

    • SHA256

      1e37284c26f08db40910d989dd9a7b917500b0c24280c8a71f16325ff265d177

    • SHA512

      1e1c8553a307b06bff34b422e5cfdd0230162b4c3dd97bc0d736ed5069352692462ba1bc81595711e16d97e25111be93ce9b3b6411f99f12071cad34532f163d

    • SSDEEP

      6144:rplhytE7KivmeP2+qtOvIUHX1ZVzMzg73QFNFfcaFeFOFwcGF6cmFWc0FWc8cIcm:dKkmeOrFNFfcaFeFOFwcGF6cmFWc0FWy

    Score
    1/10
    behavioral29behavioral30

    • Target

      RDR2CHEAT/lib/net46/System.Data.SQLite.dll

    • Size

      348KB

    • MD5

      83dfd2fe35efb2154bcdd3b475f378f2

    • SHA1

      43eaf586250bf5c8b32eb832cf3479a8dbf7cca2

    • SHA256

      7a4dde948b573b5a92cb1f63a2201006e61ea24107d9668a36efa378e8d48f08

    • SHA512

      0fa675541530a02285d4144df0f85a838a415466f7ea08251297e062a1fa33c475fd29539fa83a62600f4df124dc80f786b4bed2b7aecccc07d9dc09c517b90b

    • SSDEEP

      6144:ZGQLrNgxi5kQFoqrgwy8EroHwiM53F6Q3ncU0YbhGUTJupozw7esl0waFNFfcaFI:AQLrNgxi5loqrgwy8ErKl1Q3nv0YNMew

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks

static1

fondnessredline
Score
10/10

behavioral1

redlinefondnessinfostealer
Score
10/10

behavioral2

redlinefondnessinfostealer
Score
10/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10