Resubmissions

02-01-2025 07:19

250102-h5tw6szqcs 10

General

  • Target

    https://github.com/dzhizzus/Valorant-Hack

  • Sample

    250102-h5tw6szqcs

Malware Config

Extracted

Family

redline

C2

192.36.41.140:1914

Attributes
  • auth_value

    0f1335daba5ac306ad1c24b06755b6e9

Targets

    • Target

      https://github.com/dzhizzus/Valorant-Hack

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks