MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1b084722bd33d9bfb80a9c5d165edb20aea79c2fbcdeae25d7244bb19b25e34f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



RedLineStealer


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: 1b084722bd33d9bfb80a9c5d165edb20aea79c2fbcdeae25d7244bb19b25e34f
SHA3-384 hash: df6fd0249cebd2976ed23f42a08e0640d0b8c605f144e86df3aa3d4ec5a707e5b3e4b89785823d3343fe973ffe599af8
SHA1 hash: ea00e363b85890e254d5a32dbc4698596055cae1
MD5 hash: 40ba184face3e8af092bbfd9c4a60ad2
humanhash: north-saturn-georgia-bulldog
File name:SquirrelsFlow_beta.zip
Download: download sample
Signature RedLineStealer
File size:1'032'963 bytes
First seen:2022-09-14 08:35:01 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:Fodh4JB0YKhp87vrhRlFYpUWNRpfwQThz224:d0vhpcr3YJFVThzU
TLSH T13E2533C65E74CD0649C6E9949F4E6E2DF14B027528D20AC39AC053809CBDFAE77E6C1A
TrID 80.0% (.ZIP) ZIP compressed archive (4000/1)
20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter @Iamdeadlyz
Tags:exe RedLineStealer SquirrelsFlow zip


Twitter
@Iamdeadlyz
Password: ER90-45VO
C&C: 77.73.134.5:30812

Intelligence


File Origin
# of uploads :
1
# of downloads :
1'821
Origin country :
n/a
Mail intelligence
No data
Vendor Threat Intelligence

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

RedLineStealer

zip 1b084722bd33d9bfb80a9c5d165edb20aea79c2fbcdeae25d7244bb19b25e34f

(this sample)

  
Delivery method
Distributed via web download

Comments