redline | d84ae6a1fe42df7886cbaec78b8433ab93a2ff54b0290754eb7b5315734904bb | Triage

Resubmissions

11/10/2023, 00:51

231011-a7gevsbe37 10

11/10/2023, 00:50

231011-a652tshd41 10

31/01/2023, 09:06

230131-k21xeshe3z 7

Analysis

max time kernel
131s
max time network
146s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11/10/2023, 00:50

Sharing

Report Analysis Logs

General

Target

RDR2CHEAT/PrimeXLauncher.exe
Size

159KB
MD5

0c2de2a3c96398428b0ce53ee8be212f
SHA1

348a9089ecdc242b2d729f642a70794d74c9a06b
SHA256

1331d10811b5b02f55f7a6fa0e957543c2c2ea5c9817518f97905b6038dfed93
SHA512

b767bb3487ddca3bfd8d998b675d149f06473190755d8b0402469ddfebfc4121384bd65107850036b67f72429bd8fca399b9b3ec54f088a49935f20ca5d3f0a3
SSDEEP

3072:OaAzRVKaMvVMLGXVJYkwOQKlTXSRBI1IVZQLv0e0Ut:OaAzRV9MMIF1IVZQLv

Score

10^/10

redline fondness infostealer

Malware Config

Extracted

Family

redline

Botnet

FONDNESS

C2

89.22.234.180:40608

Attributes

auth_value
8dd80c7c3aad106b12e2f6a3afd7a250

Signatures

RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
infostealer redline

C:\Users\Admin\AppData\Local\Temp\RDR2CHEAT\PrimeXLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\RDR2CHEAT\PrimeXLauncher.exe"
1⤵
PID:2464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2464-0-0x00000000001A0000-0x00000000001CE000-memory.dmp

Filesize
184KB

Download
memory/2464-1-0x0000000074B20000-0x000000007520E000-memory.dmp

Filesize
6.9MB

Download
memory/2464-2-0x0000000000580000-0x00000000005C0000-memory.dmp

Filesize
256KB

Download
memory/2464-3-0x0000000074B20000-0x000000007520E000-memory.dmp

Filesize
6.9MB

Download
memory/2464-4-0x0000000000580000-0x00000000005C0000-memory.dmp

Filesize
256KB

Download