Extracted

• • Target
    Warzone Hack (s3)(updated)/InjUi.dll
  • Size 315KB
  • SHA256 d1f61c22f1c44eb62eeb10da8b445dffdb33fb46c18038fbc31feb67000eb489
  • MD5 60d0a829b3427770c91dc2a4018de801
  • SHA1 5c6987086961a11ebc17a840d5a873dec48e6f71
  • SHA512 75c9fa48a019f1b2d4a3f0ea01ad09a794ff64b10528b4996c8df688915d3477b511da26b65912a2eaece0948e562395732d872c1f5b589fdabaf382a6bd4bbe
  • SSDEEP 48:mQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQf3:n
  • TLSH
    T13C64120ACAA2280A080F2750329620980AA23C80AB22A9CA9821082200C02B808CAA2A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral1behavioral2
• • Target
    Warzone Hack (s3)(updated)/WarzoneHack.dll
  • Size 90KB
  • SHA256 b7313814cb16b85333eefcf6c2ea994fcef0be26c3490b5e6ebd8a02bdc14d33
  • MD5 2f964e12ec7e786c2eb4afa5c3fb0386
  • SHA1 7b898cccac2016b41aa00007fa845112a689913d
  • SHA512 1a604c4d32e2121e2e2d10ddc32bb6add597a3796fa03ef8960c9404866b635029c0818120235dcac7b66e7041f39022ee130ae6a3e9c7ba2c14d8fa1bfec052
  • SSDEEP 48:mQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQf3:n
  • TLSH
    T1AC93120ACAA2280A080F2750329620980AA23C80AB22A9CA9821082200C02B808CAA2A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral3behavioral4
• • Target
    Warzone Hack (s3)(updated)/bin/hackinjector.dll
  • Size 135KB
  • SHA256 7e5f53c1b224345ae6f158c047b77ac82b841b883854c64cdf3c34ae6785565d
  • MD5 fcded1df23126cc0a38b79913307c194
  • SHA1 ba0f9795c90597c7c5100513af1f5af2dea74baa
  • SHA512 ac3a87078612bcc259d61518bd68e9406ebe48dfceeb2bde62108e0e9a261817ebeb643192041ed381aeb8f6386b0a498181d723cb056e59ac7e2677dc0045bc
  • SSDEEP 48:mQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQf3:n
  • TLSH
    T1E8D3120ACAA2280A080F2750329620980AA23C80AB22A9CA9821082200C02B808CAA2A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral5behavioral6
• • Target
    Warzone Hack (s3)(updated)/mwzinjLib.dll
  • Size 130KB
  • SHA256 b10d0fbec06f2c28bb9cb83014a0ee9ea33257937ff7121e1ee2dccb301237e5
  • MD5 78fa5f643c54aa44c5448557d6100e27
  • SHA1 cd1763ff1c067bacedf79faac34762ce14a5fe93
  • SHA512 d9ec22007bb467cb4feaf5eed07f57d86fe4ba21340d62e153bb4193b01af50968f8f59d57024fd213257c1527d4c080d7615a2d461bad0ea8d16c1388613d6d
  • SSDEEP 48:bQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfQfI:7
  • TLSH
    T1CFD31206CBA21D0A484F7750729724DC0BF33CD1BF22F9CA98354C2240D07B50CCA62A
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral7behavioral8
• • Target
    Warzone Hack (s3)(updated)/warzone hack injector.exe
  • Size 2.3MB
  • SHA256 f3159d3a2023b020d377d69141af4c279728ba4689d9dd8635c85c997ccd2f29
  • MD5 0f4edd425900502c2d67c87ed3168153
  • SHA1 0bde8ab0c474dbf592ff0aaacab250ce2547cf15
  • SHA512 d3b2aff76d9cc75d720f75a0f6951679004786fac56242fe32e26dc21e68dcdca7dccdf3b54f66f100416daffb25a19de7c7c63c44b9d1ef2e136e1b7bda73da
  • SSDEEP 49152:9mRQEdJh904FEOBJ0oVeqbvH24uiFWpfP:9UQEdJh904FEO/0+bvH24CP
  • TLSH
    T19DB508139B8B0E75CDC27BB461CB633A9734EE30CA269B7FF608C53559532C5681AB42
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  850655728discoveryredlineinfostealer

  • Family: RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Suspicious use of SetThreadContext

  behavioral10behavioral9