General
- Target Apocalypse Launcher 0.24.exe
- Size 4.2MB
- Sample221201-pkg57sbb51
- SHA256 90b902a384f7b3da868569a30cbebf140a895fcf028653dfbfb90f5fa6d0d21e
- MD5 277a2ef50b2879fe39489b613d9f6667
- SHA1 15fb59b85fe2a2ad1dcbaccb17582a03f88ca20c
- SHA512 3c9b2c5a40d318af8c23661c5a40769541cede4073f42692ea6fa0b1c754b80597cbbed000816a484fd6634a12d118a2fdb827fce7d41d7e721ec99ff981a10a
- SSDEEP 98304:S+W2tgj7eiP1+bzgJyM4sYXCl6fMX2hs/4Tq9KLz63g:SStgmq1og8AkC4fMlQ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Apocalypse Launcher 0.24.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Apocalypse Launcher 0.24.exe
Resource
win10v2004-20221111-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
pro
C2
-
79.137.199.206:45354
Attributes
-
auth_value
e20e8d1492a37ff0cfab3cd3f6c60362
Targets
-
- Target Apocalypse Launcher 0.24.exe
- Size 4.2MB
- SHA256 90b902a384f7b3da868569a30cbebf140a895fcf028653dfbfb90f5fa6d0d21e
- MD5 277a2ef50b2879fe39489b613d9f6667
- SHA1 15fb59b85fe2a2ad1dcbaccb17582a03f88ca20c
- SHA512 3c9b2c5a40d318af8c23661c5a40769541cede4073f42692ea6fa0b1c754b80597cbbed000816a484fd6634a12d118a2fdb827fce7d41d7e721ec99ff981a10a
- SSDEEP 98304:S+W2tgj7eiP1+bzgJyM4sYXCl6fMX2hs/4Tq9KLz63g:SStgmq1og8AkC4fMlQ
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Accesses cryptocurrency files/wallets, possible credential harvesting
Suspicious use of SetThreadContext