General

  • Target
    Apocalypse Launcher 0.24.exe
  • Size 4.2MB
  • Sample221201-pkg57sbb51
  • SHA256 90b902a384f7b3da868569a30cbebf140a895fcf028653dfbfb90f5fa6d0d21e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • redline

Botnet
  • pro

C2
  • 79.137.199.206:45354

Attributes
  • auth_value

    e20e8d1492a37ff0cfab3cd3f6c60362

Targets

    • Target
      Apocalypse Launcher 0.24.exe
    • Size 4.2MB
    • SHA256 90b902a384f7b3da868569a30cbebf140a895fcf028653dfbfb90f5fa6d0d21e
    • MD5 SHA1 SHA512 SSDEEP
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks