Resubmissions

11-10-2023 00:51

231011-a7gevsbe37 10

11-10-2023 00:50

231011-a652tshd41 10

31-01-2023 09:06

230131-k21xeshe3z 7

General

  • Target

    RDR2CHEAT.rar

  • Size

    20.9MB

  • MD5

    20d05abd695dc6915265b866cf0e33a3

  • SHA1

    a0cbfdeae1142ff3c98853414e4e0761250b1dda

  • SHA256

    d84ae6a1fe42df7886cbaec78b8433ab93a2ff54b0290754eb7b5315734904bb

  • SHA512

    0d68944aeb3177e2122e097abddd6db875b018b9dc52768a00da3874d7fa47c069b2ad65e1a03cc30125bbd4225d958f8dcfe866e46215f98354382774d98047

  • SSDEEP

    393216:FcL4sxjmi7TmwhPQOqRa0lHjf9YfM6VHPUP/2nyr+dariBA6a/3Js1EEYgY:WjxjvmwuOb0lHz9YfnPA+dA7/5suE8

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

FONDNESS

C2

89.22.234.180:40608

Attributes
  • auth_value

    8dd80c7c3aad106b12e2f6a3afd7a250

Signatures

  • Redline family
  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • RDR2CHEAT.rar
    .rar

    Password: rdr2menu

  • RDR2CHEAT/.signature.p7s
  • RDR2CHEAT/Newtonsoft.Json.12.0.3.nupkg
    .nupkg
  • RDR2CHEAT/Portable.BouncyCastle.1.8.10.nupkg
    .nupkg
  • RDR2CHEAT/PrimeXLauncher.exe
    .exe windows:4 windows x86

    Password: rdr2menu

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • RDR2CHEAT/Stub.System.Data.SQLite.Core.NetFramework.1.0.113.3.nupkg
    .nupkg
  • RDR2CHEAT/build/net20/Stub.System.Data.SQLite.Core.NetFramework.targets
  • RDR2CHEAT/build/net20/x64/SQLite.Interop.dll
    .dll windows:5 windows x64

    Password: rdr2menu

    dc91178608a92843373f5004a8e98cdc


    Headers

    Imports

    Exports

    Sections

  • RDR2CHEAT/build/net20/x86/SQLite.Interop.dll
    .dll windows:5 windows x86

    Password: rdr2menu

    ef8016ca494617f48cb830b8054c076a


    Headers

    Imports

    Exports

    Sections

  • RDR2CHEAT/build/net40/Stub.System.Data.SQLite.Core.NetFramework.targets
  • RDR2CHEAT/build/net40/x64/SQLite.Interop.dll
    .dll windows:5 windows x64

    Password: rdr2menu

    c9565083030811052871bf4c9f6c5643


    Headers

    Imports

    Exports

    Sections

  • RDR2CHEAT/build/net40/x86/SQLite.Interop.dll
    .dll windows:5 windows x86

    Password: rdr2menu

    ba39999b6c6fdeed0050346dd4463be6


    Headers

    Imports

    Exports

    Sections

  • RDR2CHEAT/build/net45/Stub.System.Data.SQLite.Core.NetFramework.targets
  • RDR2CHEAT/build/net45/x64/SQLite.Interop.dll
    .dll windows:6 windows x64

    Password: rdr2menu

    d6a0f5ba011be332966ef839f3768294


    Headers

    Imports

    Exports

    Sections

  • RDR2CHEAT/build/net45/x86/SQLite.Interop.dll
    .dll windows:6 windows x86

    Password: rdr2menu

    5df88b5eeabd870f9f624aa3b350c037


    Headers

    Imports

    Exports

    Sections

  • RDR2CHEAT/build/net451/Stub.System.Data.SQLite.Core.NetFramework.targets
  • RDR2CHEAT/build/net451/x64/SQLite.Interop.dll
    .dll windows:6 windows x64

    Password: rdr2menu

    57835f15d714b442fd8cfb5a9b65d906


    Headers

    Imports

    Exports

    Sections

  • RDR2CHEAT/build/net451/x86/SQLite.Interop.dll
    .dll windows:6 windows x86

    450236228c7fa69d2a1ab913ffb5080d


    Headers

    Imports

    Exports

    Sections

  • RDR2CHEAT/build/net46/Stub.System.Data.SQLite.Core.NetFramework.targets
  • RDR2CHEAT/build/net46/x64/SQLite.Interop.dll
    .dll windows:6 windows x64

    3e20475d5ec84d1aa750ee653ccc2854


    Headers

    Imports

    Exports

    Sections

  • RDR2CHEAT/build/net46/x86/SQLite.Interop.dll
    .dll windows:6 windows x86

    c39e4a52ff07015ab5789a3d338c04cd


    Headers

    Imports

    Exports

    Sections

  • RDR2CHEAT/buildTransitive/net20/Stub.System.Data.SQLite.Core.NetFramework.targets
  • RDR2CHEAT/buildTransitive/net40/Stub.System.Data.SQLite.Core.NetFramework.targets
  • RDR2CHEAT/buildTransitive/net45/Stub.System.Data.SQLite.Core.NetFramework.targets
  • RDR2CHEAT/buildTransitive/net451/Stub.System.Data.SQLite.Core.NetFramework.targets
  • RDR2CHEAT/buildTransitive/net46/Stub.System.Data.SQLite.Core.NetFramework.targets
  • RDR2CHEAT/lib/net20/System.Data.SQLite.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RDR2CHEAT/lib/net20/System.Data.SQLite.dll.altconfig
    .xml
  • RDR2CHEAT/lib/net20/System.Data.SQLite.xml
    .xml .js
  • RDR2CHEAT/lib/net40/System.Data.SQLite.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RDR2CHEAT/lib/net40/System.Data.SQLite.dll.altconfig
    .xml
  • RDR2CHEAT/lib/net40/System.Data.SQLite.xml
    .xml .js
  • RDR2CHEAT/lib/net45/System.Data.SQLite.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RDR2CHEAT/lib/net45/System.Data.SQLite.dll.altconfig
    .xml
  • RDR2CHEAT/lib/net45/System.Data.SQLite.xml
    .xml .js
  • RDR2CHEAT/lib/net451/System.Data.SQLite.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RDR2CHEAT/lib/net451/System.Data.SQLite.dll.altconfig
    .xml
  • RDR2CHEAT/lib/net451/System.Data.SQLite.xml
    .xml .js
  • RDR2CHEAT/lib/net46/System.Data.SQLite.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RDR2CHEAT/lib/net46/System.Data.SQLite.dll.altconfig
    .xml
  • RDR2CHEAT/lib/net46/System.Data.SQLite.xml
    .xml .js