🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 60f3d215179ef5bc78424b273565ae3ff061ae5b31bc3a2e9d8d7908f2aaf51e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



RedLineStealer


Vendor detections: 13


Intelligence 13 IOCs YARA 8 File information Comments

SHA256 hash: 60f3d215179ef5bc78424b273565ae3ff061ae5b31bc3a2e9d8d7908f2aaf51e
SHA3-384 hash: ca06e53c1b3302328481e440ea0d1df66a28fbdf6e83a3e57f79f610086f384c4177508b41925a6d366618c99223f17b
SHA1 hash: 367010d8311620e05e91bdc12674a6ca839d34e1
MD5 hash: a28c0a5cc91f8bc21a6203c02f0277d9
humanhash: mountain-nebraska-yellow-spring
File name:file.exe
Download: download sample
Signature RedLineStealer
File size:288'895 bytes
First seen:2023-06-08 00:29:18 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash f264906d4975bf1277da66f2124faba1 (14 x RedLineStealer)
ssdeep 6144:rQvoWvJfoZuwvTygXUNVS4MGh1aBFrvz1xcxcWh9rt:rUO/yR1aBFrvz1xcxd9rt
TLSH T1B954480237C68CBDF8AA073D60D48F3DC877ED60165464FA37A89A618ED0313959B5BE
TrID 47.3% (.EXE) Win32 Executable MS Visual C++ (generic) (31206/45/13)
15.9% (.EXE) Win64 Executable (generic) (10523/12/4)
9.9% (.DLL) Win32 Dynamic Link Library (generic) (6578/25/2)
7.6% (.EXE) Win16 NE executable (generic) (5038/12/1)
6.8% (.EXE) Win32 Executable (generic) (4505/5/1)
Reporter Chainskilabs
Tags:exe RedLineStealer