General
- Target Roblox Hack.exe
- Size 4.0MB
- Sample260812-c3asmaxcma
- SHA256 dc14f1e442332012b8c078d6117cb6bde38c51d59aa82778ecf563bbe4e0e8a5
- MD5 c3ee58b231cffa28101542dff1ab07e3
- SHA1 611ec1bd5f0886d076a71da1093e3330985df8f7
- SHA512 d0cb5dc5f39e41b504b8f6360464c7301bf47b9085bf910cae2d7a87af8bac7bd6a6964ffac5e11c169fa2c20f004d34416b58f1778a4fab24f0c319af41962a
- SSDEEP 98304:cz0O0n6vgwMKoyQ0M1LRC3dcf9JtSZhBTOiOxXXU:dxKF2183O9JkZHOi+nU
- TLSH T1F91633E5D3A2325CD82FCD363A544A07FA485041AB063BBF2A6F5DEB06DC0AEDF15581
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Roblox Hack.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Roblox Hack.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
@valya_kust
C2
-
95.143.179.85:33214
Attributes
-
auth_value
af4ff71452d4082e548471d04e4f5657
Targets
-
- Target Roblox Hack.exe
- Size 4.0MB
- SHA256 dc14f1e442332012b8c078d6117cb6bde38c51d59aa82778ecf563bbe4e0e8a5
- MD5 c3ee58b231cffa28101542dff1ab07e3
- SHA1 611ec1bd5f0886d076a71da1093e3330985df8f7
- SHA512 d0cb5dc5f39e41b504b8f6360464c7301bf47b9085bf910cae2d7a87af8bac7bd6a6964ffac5e11c169fa2c20f004d34416b58f1778a4fab24f0c319af41962a
- SSDEEP 98304:cz0O0n6vgwMKoyQ0M1LRC3dcf9JtSZhBTOiOxXXU:dxKF2183O9JkZHOi+nU
- TLSH T1F91633E5D3A2325CD82FCD363A544A07FA485041AB063BBF2A6F5DEB06DC0AEDF15581
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext