MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 085faa7af8d6c07dafb20454d5ba886d871e8f4ef752234e549d99a51857087a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



RedLineStealer


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: 085faa7af8d6c07dafb20454d5ba886d871e8f4ef752234e549d99a51857087a
SHA3-384 hash: d210aea313bdd58e0b4a714a28fdb667ab46b691f57d99f996e63ea8b12c2792721cb13f34383006285aad09f39ef85c
SHA1 hash: 41ec0990a467d127f8fc03cbdf8d1aba669bc4e5
MD5 hash: 1151f5db2d94859b506d6adf8e350b35
humanhash: berlin-sink-mockingbird-six
File name:1151f5db2d94859b506d6adf8e350b35.exe
Download: download sample
Signature RedLineStealer
File size:41'138 bytes
First seen:2021-05-25 07:08:43 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
ssdeep 768:oRO0auel62Yn52MvPeqRFqVff7fBXs3RGNMQ8KuYlnzDQSf36SPLmpa:omu+6LnsWqxzBcBH4lo6Fx
TLSH 0C03F921BA40C039EDA220FC69ADA3BDE12D1BE657C420D793E56EF267385E47D3041E
Reporter abuse_ch
Tags:exe RedLineStealer

Intelligence


File Origin
# of uploads :
1
# of downloads :
115
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
52 / 100
Signature
Machine Learning detection for sample
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
Win32.Trojan.Generic
Status:
Suspicious
First seen:
2021-05-25 07:09:13 UTC
AV detection:
9 of 46 (19.57%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

RedLineStealer

Executable exe 085faa7af8d6c07dafb20454d5ba886d871e8f4ef752234e549d99a51857087a

(this sample)

  
Delivery method
Distributed via web download

Comments