Overview
overview
10Static
static
3Warzone ha...al.dll
windows7-x64
1Warzone ha...al.dll
windows10-2004-x64
1Warzone ha...al.dll
windows10-ltsc 2021-x64
1Warzone ha...al.dll
windows11-21h2-x64
1Warzone ha...ck.exe
windows7-x64
10Warzone ha...ck.exe
windows10-2004-x64
10Warzone ha...ck.exe
windows10-ltsc 2021-x64
10Warzone ha...ck.exe
windows11-21h2-x64
10Warzone ha...v2.dll
windows7-x64
1Warzone ha...v2.dll
windows10-2004-x64
1Warzone ha...v2.dll
windows10-ltsc 2021-x64
1Warzone ha...v2.dll
windows11-21h2-x64
1General
-
Target
Warzone_hack_space_cheats.rar
-
Size
2.0MB
-
Sample
241111-z2y56azmcn
-
MD5
a1de4bfa5d826d1b102d73cd1b37eff0
-
SHA1
e3d1125a8d3e212fc234731f4535e9cfd2099dc1
-
SHA256
80ed3454e9a44debe81d41682d26a343ed19f8d7f8706bad7805e2e8a26f657d
-
SHA512
650052076c2988e0db5f5c8c6dad57d931ff40a0bb0d80060a32972f49cc092c876a3a0a6e40693f5b8b7fab0b729c8ee0ffd36551ccb62309b86926529bb5fd
-
SSDEEP
49152:PEl5ihhzu7bin+hinf6ZRQQHv04ZNyXc6tzsokGEEaa7oxO2ZXxxq:PEl5ivz+ba+hinf6ZGQDGXc6tzsoHbOg
Static task
static1
Behavioral task
behavioral1
Sample
Warzone hack space cheats/IA2Marshal.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Warzone hack space cheats/IA2Marshal.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Warzone hack space cheats/IA2Marshal.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral4
Sample
Warzone hack space cheats/IA2Marshal.dll
Resource
win11-20241023-en
Behavioral task
behavioral5
Sample
Warzone hack space cheats/Warzone hack.exe
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
Warzone hack space cheats/Warzone hack.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Warzone hack space cheats/Warzone hack.exe
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral8
Sample
Warzone hack space cheats/Warzone hack.exe
Resource
win11-20241023-en
Behavioral task
behavioral9
Sample
Warzone hack space cheats/libGLESv2.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Warzone hack space cheats/libGLESv2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Warzone hack space cheats/libGLESv2.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral12
Sample
Warzone hack space cheats/libGLESv2.dll
Resource
win11-20241007-en
Malware Config
Extracted
redline
193.106.191.160:8673
-
auth_value
4334b1b6304e7a30dd9472e85aa443c9
Targets
-
-
Target
Warzone hack space cheats/IA2Marshal.dll
-
Size
76KB
-
MD5
3513a7546bbe15363a626f76e3897a8c
-
SHA1
f22656abe335c8bfb7a795bce5bb732a66d8b895
-
SHA256
00fdb467df300b85818341dd84feb72387650e0447c19c8bb9e266cf1d758514
-
SHA512
567e768c0b90a6d27a586ad6ab2bcf9b17a06e7fa3c049c4434e0c69650b23aa8af5d9888f849f51e16a34ae7603c577f3fb8e4251abdd3be6b15986a3bd8f38
-
SSDEEP
768:173MsNBtD7DNnsdniPKRKlM+C2G2fcbNkBewiLWbWwKeXV:myDnNns5iPKRKlM+CnS+G/iLml
Score1/10 -
-
-
Target
Warzone hack space cheats/Warzone hack.exe
-
Size
2.5MB
-
MD5
3f4540b7b375b6f612c2256998af7c3c
-
SHA1
59d101e0020dcd567c2d0ecc271a0067122caff4
-
SHA256
e6cdd59f34d4bf7707237f377a4b58e1c4060f190068241c406b4c36719d8926
-
SHA512
ef06c781c8fe20b64b3ab7048dee8f84f7bbbfefcf2d91be1eb0206969c01962633c439d4c3929052c6a9c53b834997189f3017c4affc0079f44b29130f0c2d7
-
SSDEEP
24576:F1J/o3viYPYCQllGmmMbOdLDnay9ObwmePSGcWmLhgOL3xGhl3RuQ55313/:F1y3fv+McWmLhgOMl3h
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-
-
-
Target
Warzone hack space cheats/libGLESv2.dll
-
Size
5.8MB
-
MD5
fa36a0ac7e17ed74f89ab26e87bca822
-
SHA1
494e1dba754233be49507800046cd464b7a95df0
-
SHA256
9288b00918210aba7bfb178aad65cb8b78f3704d346b3b9c3c28782aaa5b22cb
-
SHA512
657ef09896e6f23b995a80829799418cff93ff279899f5c443b01d05b391f3b30ae87a24e6830e3c1baa0dc45ac31df0f827d9757508cf52c840760109aae5ca
-
SSDEEP
49152:/pQCuPTkVllbkLWjnUsPgb07Qk4kX5RK6M4LQJ1jBpWs8JB0hXGDew3fGwuIiJ/D:xQCSwAsgXjpWs8ZJBl/
Score1/10 -