General

  • Target
    Roblox Hack.exe
  • Size 4.0MB
  • Sample260812-c3asmaxcma
  • SHA256 dc14f1e442332012b8c078d6117cb6bde38c51d59aa82778ecf563bbe4e0e8a5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • redline

Botnet
  • @valya_kust

C2
  • 95.143.179.85:33214

Attributes
  • auth_value

    af4ff71452d4082e548471d04e4f5657

Targets

    • Target
      Roblox Hack.exe
    • Size 4.0MB
    • SHA256 dc14f1e442332012b8c078d6117cb6bde38c51d59aa82778ecf563bbe4e0e8a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks