General
-
Target
https://github.com/OfficialExLoader/ExLoader/releases/download/CSGO/ExLoader_Installer.zip
-
Sample
241223-pjptnazkhr
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/OfficialExLoader/ExLoader/releases/download/CSGO/ExLoader_Installer.zip
Resource
win10v2004-20241007-en
21 signatures
150 seconds
Malware Config
Extracted
Family
redline
C2
185.104.195.144:80
Attributes
-
auth_value
bec160f44feba1f3cd9916c9700e0568
Targets
-
-
Target
https://github.com/OfficialExLoader/ExLoader/releases/download/CSGO/ExLoader_Installer.zip
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-
Suspicious use of SetThreadContext
-