🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6dbd81ebf75f8c4efdbea5f2b48f0896d84ff65e39de5981eba2be51e766341f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



RedLineStealer


Vendor detections: 4


Intelligence 4 IOCs YARA 2 File information Comments

SHA256 hash: 6dbd81ebf75f8c4efdbea5f2b48f0896d84ff65e39de5981eba2be51e766341f
SHA3-384 hash: 71d8d668d59a69b16b06a3fbe27ca357faff0053ff953a7a7c5102d28412e4b235485e0b089e2fbb948485133ced5383
SHA1 hash: 19ce9845c9bd1faad7168aa04a39cb021b4ec5e6
MD5 hash: db81b981a35daddcf474cabbbc6bad8e
humanhash: spaghetti-pluto-ack-aspen
File name:Document.pdf.scr.zip
Download: download sample
Signature RedLineStealer
File size:5'648'993 bytes
First seen:2023-01-21 13:58:57 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 98304:h0Q5dcYv1rQxt3BCsgcSupx9mg8/Utk5vh+L0IyvWL1eebKw9pnYomx3aY:BDcYhapBrdS2xR8/ak5ZzebKwfoaY
TLSH T1644633C03356C4FEDEEA31BDA8965A247E194FD4A1E1781E554331ED0A873A02E5EC2F
TrID 80.0% (.ZIP) ZIP compressed archive (4000/1)
20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter SquiblydooBlog
Tags:file-pumped Redline RedLineStealer zip

Intelligence


File Origin
# of uploads :
1
# of downloads :
174
Origin country :
US US
File Archive Information

This file archive contains 129 file(s), sorted by their relevance:

File name:hoteBillete.xml
File size:766 bytes
SHA256 hash: 9e14d2b81972652ba6b30e9dbd5f08819ab72a35c8b17c9f802a0bfa65a928df
MD5 hash: 9fda23db15ce9812e82067e847404ce2
MIME type:text/xml
Signature RedLineStealer
File name:antuFinificUnpins.xml
File size:42'403 bytes
SHA256 hash: 09248ab964f32daa0cbbfc95c3d9126b53b6d92d20de876b355b96e7abcc6101
MD5 hash: 75b292a7d8f764853debf8f7c2812ed5
MIME type:text/xml
Signature RedLineStealer
File name:pried.xml
File size:18'415 bytes
SHA256 hash: 9b9deb44c9e175113b44b340e546bd45cf34181909a32e52b132238771e2fdd5
MD5 hash: 22b061f9380e139d2c455689521fab51
MIME type:text/xml
Signature RedLineStealer
File name:dazaNeuter.xml
File size:54'856 bytes
SHA256 hash: 919b27be5dba9f5d1510a50bde5e2ed0132846b40d412f17c5f7d1225497d86b
MD5 hash: 574b40d1e0ec6bf686e32f13a6be8907
MIME type:text/xml
Signature RedLineStealer
File name:vaporer.xml
File size:26'916 bytes
SHA256 hash: 40292e35d172f022bcd3bc65ee8dc2d22939435ccb49671343971634dbbfb095
MD5 hash: 06a00b0d97d52b76e96c186e7e8be6d5
MIME type:text/xml
Signature RedLineStealer
File name:aflare.xml
File size:38'084 bytes
SHA256 hash: 070fced17705e35366ef534475225c973a3f44654352678acb833a74a96a83e2
MD5 hash: 527cad3a6ab8bd183b419d709dbd029d
MIME type:text/xml
Signature RedLineStealer
File name:ptsWringerCepheid.xml
File size:53'827 bytes
SHA256 hash: 8c05bbdcd8396d829b9d2c92ea9152563374dfd6327892c175dd3abda78f0093
MD5 hash: 293f46f3a35d6fe36b5874475ee239ca
MIME type:text/xml
Signature RedLineStealer
File name:belapHippest.xml
File size:80'980 bytes
SHA256 hash: 7ef67329ce7162d134523685dfe2539586c91923428b406d6cf446b88550a549
MD5 hash: 665955f5fd0467b8dc5a5b95ebc023f1
MIME type:text/xml
Signature RedLineStealer
File name:corkierHoggersMuon.xml
File size:35'976 bytes
SHA256 hash: f4b3faf55c75a30f5adf00ebcbaa98752d9255e4520c068277cbe7543786ac5f
MD5 hash: a45c8aa7940292af1d5bdb21e8b25ce8
MIME type:text/xml
Signature RedLineStealer
File name:outweedDwelled.xml
File size:44'482 bytes
SHA256 hash: 5afe5a1c99e96c6d2f0fdd481d409722f7068d54a4f3c382bac9e5e907968321
MD5 hash: e934a84bc20b2a31723cbd79ef5368e2
MIME type:text/xml
Signature RedLineStealer
File name:refYentaLammy.xml
File size:292 bytes
SHA256 hash: 07a500bbb53fb68d562206fd1a77a5bd8547308b8f308aa28beccb4a7eba7076
MD5 hash: 350118ac3de31dff66dcefd9dd2aa137
MIME type:text/xml
Signature RedLineStealer
File name:wizenVanity.xml
File size:32'659 bytes
SHA256 hash: aa862b5f58a8583df34fddd4e5e1c2d1c4706d6842fd8507cc961041e6a99078
MD5 hash: 659cb6282a9e695cd054059d87386d81
MIME type:text/xml
Signature RedLineStealer
File name:heighth.xml
File size:101'231 bytes
SHA256 hash: eaf919070a4c4c3c607d9e977bd241920ff3dc45902585148483e35ac3204c53
MD5 hash: bb6395aafce186a50d52d41219f1a242
MIME type:text/xml
Signature RedLineStealer
File name:simiansKeresanOxonic.xml
File size:25'852 bytes
SHA256 hash: f1e3af3b96b9d4c922afa913f0070b70870d533f791e63f403597c805b1a2864
MD5 hash: af96816d57d49a48a35051d736807ffa
MIME type:text/xml
Signature RedLineStealer
File name:anemia.xml
File size:64'237 bytes
SHA256 hash: 3f8662f0d399429bd27e5f9a9cb72b33254bf3765f78bc99e08fdcd4f0a721af
MD5 hash: 8beb89d551a19bcfa3946746a7c938c1
MIME type:text/xml
Signature RedLineStealer
File name:synodBolledHullock.xml
File size:52'980 bytes
SHA256 hash: 291af1e2cc569821f99f8c1df08636a1a7b81153ff4c1e34158a046401d67c57
MD5 hash: b3b4e1f968c82e77c10d5e8a0e122f2c
MIME type:text/xml
Signature RedLineStealer
File name:tbsp.xml
File size:44'424 bytes
SHA256 hash: f1bab1e758b99248a15dfb86779ba708e09fcd2b46e6bcf39e5a7c702757fdce
MD5 hash: aa9a5bc2a39a64e852fb83ecc8e9f084
MIME type:text/xml
Signature RedLineStealer
File name:gemauveDivers.xml
File size:20'904 bytes
SHA256 hash: 34ac48a73164df172be1a6a7eeefc44e1f7930a5360e624295ebfa16a64f0e5f
MD5 hash: fee158f34e7e78a49605089cb2455561
MIME type:text/xml
Signature RedLineStealer
File name:immuneSlad.xml
File size:65'859 bytes
SHA256 hash: aae9ccc645b2dca53041d3e7eb253ca56d88f8a9f557a68c9951a0d513714543
MD5 hash: 019957c11f1c5d78def2835be4642453
MIME type:text/xml
Signature RedLineStealer
File name:arragePaterae.xml
File size:44'066 bytes
SHA256 hash: 86f3df912114e938d5c44d0a7827fa41f683d3860cfc5cb527a2bab2c867fc20
MD5 hash: f3c285cd77b25cf64ca4830f802d29d0
MIME type:text/xml
Signature RedLineStealer
File name:palfryStaticProgram.xml
File size:21'180 bytes
SHA256 hash: 2482b6b524c366bfc07e49b72c199a9dfc6267a6edc41ddaba07988311798cce
MD5 hash: 6c4f5567955df790a64d28a72bac7a21
MIME type:text/xml
Signature RedLineStealer
File name:geoformNighterValium.xml
File size:55'165 bytes
SHA256 hash: d7756ad6f95c16619b2a1c93c9c4bbb8e7716e1dac766b0b5cf4f64b79abbbee
MD5 hash: 0ec6b5729c62252d01c1a14fb42479ff
MIME type:text/xml
Signature RedLineStealer
File name:beblear.xml
File size:99'241 bytes
SHA256 hash: 5cd3cb478dddbe7e0ccde28bdf3a21def23773d8b23abcc6f92b078bcab9c251
MD5 hash: f8481b4dbaaddb8961b3e4d578addaa0
MIME type:text/xml
Signature RedLineStealer
File name:swingeTieless.xml
File size:119'862 bytes
SHA256 hash: 9b6ad254d89cbd15c75a2d8ee78727a235c6901a0be72b9c1fd0de1e712a43d3
MD5 hash: d629986018f186088534dd47c23924cd
MIME type:text/xml
Signature RedLineStealer
File name:isogonBursera.xml
File size:23'993 bytes
SHA256 hash: 470fe0c744d2a3a66ab134d02422cc1f8078f438eed911cca33206737a25064b
MD5 hash: 6f57dbc564e7d0e42d69ae1de83ad6ce
MIME type:text/xml
Signature RedLineStealer
File name:ogreishCooksBandgap.xml
File size:335 bytes
SHA256 hash: 83a0b4f7df86e66bd7b78333fe112c36ee75f6f66b1d3fb3a1608955f755c40e
MD5 hash: 3f9ed3e333222da160ec45f7eda244c8
MIME type:text/xml
Signature RedLineStealer
File name:forwent.xml
File size:24'212 bytes
SHA256 hash: 1513990b054aa8098d1afb90feeb2de491ad2bdddcb31baa9d82e9ba5d4786ce
MD5 hash: e4f7ce7d86ef1e151f61734f2fc22970
MIME type:text/xml
Signature RedLineStealer
File name:aurangPitwork.xml
File size:61'241 bytes
SHA256 hash: c32ff13ddc52762a7e98ce8de69c8486cdcd5418382ffcfc02a302c10ce30920
MD5 hash: 84db6a371f0f090a82bda969853beb61
MIME type:text/xml
Signature RedLineStealer
File name:bragiDebuted.xml
File size:108'052 bytes
SHA256 hash: 486d68943f115c3840f8e65076814c32143312ea4380822f122fe289fb8f45c4
MD5 hash: 84ca46135ad4f36e942babbc5b26dd03
MIME type:text/xml
Signature RedLineStealer
File name:secantKorona.xml
File size:40'985 bytes
SHA256 hash: 7511c0c08d9787e6c1b9b7f235cea627bfcd23189996b57e26986c933ae20a29
MD5 hash: 0b289333ff8726f173f658a4382ed7f6
MIME type:text/xml
Signature RedLineStealer
File name:webbierChunkyPlatypi.xml
File size:134 bytes
SHA256 hash: 21da5b677c8701dd215695b0e32cd62fdfe9df3df522edbadb84ef7bd1f3b052
MD5 hash: 5fe6cb5fd9c23ecf0b19c8b251034aa0
MIME type:text/xml
Signature RedLineStealer
File name:penniaSonnets.xml
File size:75'031 bytes
SHA256 hash: b00eb8f11ea7afe10018fd299e5889ca4d89933865ec3fb7e733766b1081c5d6
MD5 hash: 20ac5b605404520d32a5dbf8fb9f67ba
MIME type:text/xml
Signature RedLineStealer
File name:altaicRoselLysins.xml
File size:48'523 bytes
SHA256 hash: 1d8bfd5c06bf9da6440c5ba632f9d24f72855acad704de36c973c4c0fdde5f22
MD5 hash: 074ea122615c9c2e68d49c8a1fdc6780
MIME type:text/xml
Signature RedLineStealer
File name:pigwashOlax.xml
File size:52'498 bytes
SHA256 hash: 91f835dae06352e5defe33e4853a6d537ca83135d1cecba1c1672223371e76a9
MD5 hash: 91bc0b44c179c844576d4eb58c0f0cab
MIME type:text/xml
Signature RedLineStealer
File name:muffingThicke.xml
File size:180 bytes
SHA256 hash: 58cdd72b3fd92ab24116eaaa2fa499512b4628ebe07c270152d3de8d5aa194e0
MD5 hash: 3f7711d7b9b8b4d6b3a0e78bdfa59c36
MIME type:text/xml
Signature RedLineStealer
File name:houting.xml
File size:102'279 bytes
SHA256 hash: 81fc66a0d1c8252468b6123a75accd053074fc7895ae38355fd143e49c19c278
MD5 hash: f66e7c433b43e6ce3004237b7028a498
MIME type:text/xml
Signature RedLineStealer
File name:poddleGriftsDipyre.xml
File size:22'482 bytes
SHA256 hash: dd5bacdba0a7db5b80ecbfd40cb04a33529041613b2a78cbbab45be9057dfac0
MD5 hash: ae58b179f7edf3aaf1aa8951bc3c3aff
MIME type:text/xml
Signature RedLineStealer
File name:animato.xml
File size:38'517 bytes
SHA256 hash: 06009fcc5caba5661f8d6899a98cef30618581580feebfa7b45372be484bb342
MD5 hash: eed0245c81b2153c52bc3afd0967e4a8
MIME type:text/xml
Signature RedLineStealer
File name:biancaTitanoWithies.xml
File size:62'280 bytes
SHA256 hash: c4c6bf13f56c278466c20ece906eb051cf456833b535df7f1233bb6190f947ca
MD5 hash: 12093d333e8648021fa765b4fc71870f
MIME type:text/xml
Signature RedLineStealer
File name:teererRoose.xml
File size:30'942 bytes
SHA256 hash: bec0ca8560ca31f91ab59dd43ca3cfce701cf8cd454c47f04f2c7da5a32640d1
MD5 hash: 50d2343c23172b33b7e3a6a1ae1ef50d
MIME type:text/xml
Signature RedLineStealer
File name:recode.xml
File size:21'841 bytes
SHA256 hash: da2ee85da45843892e5d1ae7b8daf30ee27915b7ecb6cef9461169271fce701d
MD5 hash: 1634d4d03c4bf8c6de1a82a69e67b327
MIME type:text/xml
Signature RedLineStealer
File name:maraAnlacesCurdy.xml
File size:31'575 bytes
SHA256 hash: ff5dedb1f7a0390ca22a4985861f955e97dcbf71b8fe063ce5cb439e2ffc6d28
MD5 hash: 5540874636035a1efccfa8308a5ee705
MIME type:text/xml
Signature RedLineStealer
File name:wouch.xml
File size:54'640 bytes
SHA256 hash: 5f4e21c8844a13c797bc8098c9f30e86284e5e7adeccacd232d6b76ef9b1e626
MD5 hash: 7083a31b80a4a41455a8cacf95e1192b
MIME type:text/xml
Signature RedLineStealer
File name:semeionLoftmen.xml
File size:570 bytes
SHA256 hash: b1ddfdfc46227d68377dd8dc78b488e83d46742961c716582e85b280b3e5bc34
MD5 hash: 29fd829cce4ac501ccce043df590f846
MIME type:text/xml
Signature RedLineStealer
File name:alezanElapseDandle.xml
File size:8'700 bytes
SHA256 hash: 704b696e3daaffe82a2af88da07484acc9e2dcfdb32f7d5d79f3539d6f0625f7
MD5 hash: 91bd1f51a430a835d83332fb38829d1f
MIME type:text/xml
Signature RedLineStealer
File name:mutestEssex.xml
File size:28'535 bytes
SHA256 hash: b3462119fd88a290c1ed2a38589998adf21ac4995c6f062a0a0e7ae3984858d6
MD5 hash: 3b5ae4f0f9c655c132aaeec15dd64b6d
MIME type:text/xml
Signature RedLineStealer
File name:dynam.xml
File size:42'058 bytes
SHA256 hash: 3b47237763202eeceed816cc7a8a0b48647e39155c10048d6f8fa89aa699dced
MD5 hash: ff4088a0c740470d6cfbf039dc96b99e
MIME type:text/xml
Signature RedLineStealer
File name:podlikeThrailOvercow.xml
File size:20'651 bytes
SHA256 hash: 701be190ce7648a6c303f9a4c798df67df6460013f1622b7a00c708deea1af5e
MD5 hash: a9fb128757ba15c156a5ae8d4d174be3
MIME type:text/xml
Signature RedLineStealer
File name:tamanuBarvellStooged.xml
File size:21'930 bytes
SHA256 hash: 8229908b98e121339244da15c60d40a4350efd27ba475f8537f7f4f4b2343db8
MD5 hash: ec97ce17ad86bc7250312b60ce57120f
MIME type:text/xml
Signature RedLineStealer
File name:mouldLiable.xml
File size:55'480 bytes
SHA256 hash: a95d53dff64df8d27c5197897107d61bff833beefb71d0344876d814f0b36f63
MD5 hash: 312450bf8c0436f31bb3e0dd61bbfab8
MIME type:text/xml
Signature RedLineStealer
File name:actless.xml
File size:91'998 bytes
SHA256 hash: 77fe3c78727be76882f421e75d3c823d5049021d3186c7a46dcc583ff1f42ee3
MD5 hash: 238b73183df1a842766f34d23ef461aa
MIME type:text/xml
Signature RedLineStealer
File name:dftSulaba.xml
File size:81'421 bytes
SHA256 hash: 98d77fc555bee39a707910ea5ee5f613b47b18ec7b8443201ed705381c34d034
MD5 hash: aebe905a24949d4f124661779ddc717a
MIME type:text/xml
Signature RedLineStealer
File name:baubeePlussesGoads.xml
File size:26'020 bytes
SHA256 hash: 75db036523c5259d5d0d1e2701c19fefe6d00e1414eb91a5a8b8ef74a99b932f
MD5 hash: 1e5fdf2f662eb8e80fcc1eee5f7f99fa
MIME type:text/xml
Signature RedLineStealer
File name:gunzSkeane.xml
File size:20'331 bytes
SHA256 hash: c06ef37ad32266c61e611ea3d72b17fe6e738b1ce9cf0b2c4d81c00d4822ff55
MD5 hash: 5b3ca50a56835bbb5d76753b879ba0f2
MIME type:text/xml
Signature RedLineStealer
File name:caroomeRecookBaramin.xml
File size:380 bytes
SHA256 hash: c228314254be0bf1d7e1eefb7bff65668d56ef07048985c0d165b5679b2663e7
MD5 hash: f42033d78418aecbacb6473925ca81da
MIME type:text/xml
Signature RedLineStealer
File name:cozierMiltTheeked.xml
File size:48'061 bytes
SHA256 hash: a1e8ba439ed87262b430e78ded92048ab50e146aac360df4c5b4be65bb9e5f1a
MD5 hash: ef9f3b19bd1a0c9c3189422ffcaf8a01
MIME type:text/xml
Signature RedLineStealer
File name:camail.xml
File size:136 bytes
SHA256 hash: f50f527bd921bf4f0f7d6bd43615a833d14338a6aa3b95acc00562aca564c595
MD5 hash: e9cf2822819fd3c8543175ae43279982
MIME type:text/xml
Signature RedLineStealer
File name:faintMicah.xml
File size:86'217 bytes
SHA256 hash: f234705b3fa2a8b03f5de67f308f82837c709e1e0044d8471c90229be8dd0224
MD5 hash: 927882bac9123ec4f46ebf6d0f7b71b4
MIME type:text/xml
Signature RedLineStealer
File name:rapiderArcked.xml
File size:86'599 bytes
SHA256 hash: 16c7506d5e1c73b953e60d7c7476e607227bcb9df5af9258d1cb5ba472600bf0
MD5 hash: ed400930e684ab820c249300259c41ac
MIME type:text/xml
Signature RedLineStealer
File name:minumBleat.xml
File size:71'422 bytes
SHA256 hash: 39482920fdb7dcc2155d7a313d3cd4d7c2301c9d5676d2f8b9018bc541d65323
MD5 hash: 0b9c1f4ee8a913b907a18ccb31dd7589
MIME type:text/xml
Signature RedLineStealer
File name:milosUnfeatyCoos.xml
File size:48'523 bytes
SHA256 hash: ba6b170a6c812bf73880c4ba78f05048b7e6cf649115c8ba87a42782ac8026bc
MD5 hash: 52a04bfaae967ca08754c006df57bc47
MIME type:text/xml
Signature RedLineStealer
File name:zairesPinyl.xml
File size:44'961 bytes
SHA256 hash: a1e36fc488948ed60d8419eff71e856ff08d41779d2865209a05e04110767c29
MD5 hash: ddb974ffe9847f18f2daab655163adb8
MIME type:text/xml
Signature RedLineStealer
File name:unthorn.xml
File size:53'863 bytes
SHA256 hash: 6203e8e797ae4b5d3e2bbb418243914ae147142b696483774b7a30577651b5b2
MD5 hash: 9f97567e505b636057152ab5d15131bb
MIME type:text/xml
Signature RedLineStealer
File name:tuyere.xml
File size:51'544 bytes
SHA256 hash: fa7951080ee9549068a3bca2b78b6b5fc8c953acd30ec4df7d4e2617fa4a256c
MD5 hash: 0ea81c735b41058f1eadbc3385594310
MIME type:text/xml
Signature RedLineStealer
File name:temiakKaliphDamar.xml
File size:8'554 bytes
SHA256 hash: c601a01266937a6b5498082ce69ad73be684e42271dd70e7523e5dc43bc70c14
MD5 hash: 77d058e934ed6c2448616e9d2f4430ad
MIME type:text/xml
Signature RedLineStealer
File name:unicedSeriosoTwirps.xml
File size:10'501 bytes
SHA256 hash: 2a4ae25dc49868f665b92e810e569b273e46f50987c04dc35814d9661d86f5a6
MD5 hash: fcf390712bccb3ae1c7ec5c76ebc5554
MIME type:text/xml
Signature RedLineStealer
File name:wheenCubitiAbroach.xml
File size:76'704 bytes
SHA256 hash: c5fa32fbec3a61b1b4fd853d800209aa674c6f060919afa92f1b659753f8acbf
MD5 hash: 84d4bffa094581135c27d44e55be210e
MIME type:text/xml
Signature RedLineStealer
File name:harpa.xml
File size:37'237 bytes
SHA256 hash: 7e474c59880782cad33bc5bb0052a0db5bbf737127ca254a6c081cbff429b3e3
MD5 hash: 5c8d8d49052b357e11ac3811b853a33a
MIME type:text/xml
Signature RedLineStealer
File name:hipeLoviers.xml
File size:82'734 bytes
SHA256 hash: 9341e9c50f26a99809c4a7813d57e462058e59d8eeea34f49b2f7bf6192568ee
MD5 hash: fd106290c7568132fa1ec4279985386b
MIME type:text/xml
Signature RedLineStealer
File name:creachyPatenteBetwine.xml
File size:20'336 bytes
SHA256 hash: 8000f341994325df9d4aa9ee51e26e660c355f758a5afe90f55b7636c7254cb5
MD5 hash: 81aeb6f84f7561a4073873e912abca8a
MIME type:text/xml
Signature RedLineStealer
File name:reprune.xml
File size:41'652 bytes
SHA256 hash: 6bd958151854cebde0067cd3a9c2170562b9c94ba884a2b13a06c37d1187214f
MD5 hash: 4ac77313c18cd5ec8111e789168ec5f9
MIME type:text/xml
Signature RedLineStealer
File name:kittockTeetan.xml
File size:88'227 bytes
SHA256 hash: 619d5eda28087837bd21248b4973982a2f1827f2e6030a61cb5ee5e798f56def
MD5 hash: f92214edd26ac01ae32724e41aa7a719
MIME type:text/xml
Signature RedLineStealer
File name:quillet.xml
File size:7'494 bytes
SHA256 hash: d5ea26e414e5ac3413524c9baaba17869c58ec2d843f1bdc7b933a4ee67c4ecd
MD5 hash: ffabe15ed2dfb5acfa0e20c503685439
MIME type:text/xml
Signature RedLineStealer
File name:griotsPaar.xml
File size:83'246 bytes
SHA256 hash: 03dedbf9a03c9430658e05bbeccb61e8d68e7cff30e7257c76d921ef1c211add
MD5 hash: b9a154d670d17678f7658904b220ad65
MIME type:text/xml
Signature RedLineStealer
File name:vespina.xml
File size:94'707 bytes
SHA256 hash: 24b747766d2762b1fb03289c01d8ae153fd21c2e462b3686d5d41ae5683e2221
MD5 hash: 73197941c76da490700c973cde29ac82
MIME type:text/xml
Signature RedLineStealer
File name:arsyl.xml
File size:62'931 bytes
SHA256 hash: 013a70408f642a0d190a36023454fb2340fb272dd4f776b94206802c53f5c6ca
MD5 hash: 3c6e27d8596de4fa9c345422c67ec6cc
MIME type:text/xml
Signature RedLineStealer
File name:apoutEngoue.xml
File size:69'826 bytes
SHA256 hash: 28e3b90105eaa54262b42462071a7a15425d8adee6c63e262d2f052c37cddaee
MD5 hash: 90cb3ad5059bc22085197dc990f91dd4
MIME type:text/xml
Signature RedLineStealer
File name:fluorsHipness.xml
File size:67'744 bytes
SHA256 hash: d688ce6e18509ddb2c08fc7ad212a942349917d6ef5edb13aab6d6c8479a7d0e
MD5 hash: e267ee361ef21e0c0d0bc80acefa4e4b
MIME type:text/xml
Signature RedLineStealer
File name:bundhBefan.xml
File size:40'455 bytes
SHA256 hash: cf57a9aaa917d7b60150c41ca81e7e6a86541d91e67620d8c597535dd6bb1766
MD5 hash: d79552cc3ec0f54c88374d1fe0b8a153
MIME type:text/xml
Signature RedLineStealer
File name:tentory.xml
File size:68'284 bytes
SHA256 hash: 1a646658c47af357a85e391ceb2120dd4a97d1d3adaaa5f9118a850f8d916f64
MD5 hash: 0289dd685634593b0a78c6da865fb5c6
MIME type:text/xml
Signature RedLineStealer
File name:pastose.xml
File size:90'788 bytes
SHA256 hash: edb40c95d8c4d7696068caf70a1814342ec7fa2495986d72d462b9979267c88f
MD5 hash: fb94db3c7a2b6a04b08803c450d642f7
MIME type:text/xml
Signature RedLineStealer
File name:aking.xml
File size:30'394 bytes
SHA256 hash: 5b125adc2d70a16d9cec31f3cb651eb5d8721aea6899caefb222cd21ffc3c26d
MD5 hash: 9dca6ac0c55d388102a903082d250005
MIME type:text/xml
Signature RedLineStealer
File name:fultzPatand.xml
File size:43'439 bytes
SHA256 hash: 5dc9dba6d7254a067348bb9036d12524b4748740a2f966d3c584810a6b87d776
MD5 hash: 0261bb5efefeea109e5711dd542b76f8
MIME type:text/xml
Signature RedLineStealer
File name:dulcGundog.xml
File size:32'985 bytes
SHA256 hash: 18395ea55f2e4a133740dd7dec9e9ae26c1da95db098dcf7ad9027f1089df416
MD5 hash: 131a449fa52e9c23985099ea8aa2a84c
MIME type:text/xml
Signature RedLineStealer
File name:eugenicUnthankHeypen.xml
File size:46'873 bytes
SHA256 hash: 92e1860427887ba167d5596e172923d5e51165aadef045f417015522ffee7397
MD5 hash: 03d5b3a1e59a0b025ac11511da71a5f6
MIME type:text/xml
Signature RedLineStealer
File name:tacklesHelenusSuivez.xml
File size:52'599 bytes
SHA256 hash: b492598db6a20e6953e2ff9e5f532a12df15c2cb447bdb68a8eb017e72623675
MD5 hash: f06735a9262375c808b92f363c6f1638
MIME type:text/xml
Signature RedLineStealer
File name:ukiyoyeKeita.xml
File size:61'681 bytes
SHA256 hash: a472d4d6bf704d900db8f186bb0ca5b22eb1461b1603bc2d21f60c7301fcbd9b
MD5 hash: 94da2af1abe8902138b70042e46dfc52
MIME type:text/xml
Signature RedLineStealer
File name:warrishWaffs.xml
File size:23'345 bytes
SHA256 hash: 51b46966466abc4185ee6b59bf6d9627733547a50caec1f059ea1d87e216037a
MD5 hash: ad2efdbb2eaf6d9376a1c7f88de2b215
MIME type:text/xml
Signature RedLineStealer
File name:hafted.xml
File size:31'418 bytes
SHA256 hash: 75bedbe5a8f7ae1349132a4a2387c0341f7b9438dec747da3ee1c4b01fba0145
MD5 hash: 4f04fc96c9405edd5724d7e9b9a8f1af
MIME type:text/xml
Signature RedLineStealer
File name:aloeCatariaRetail.xml
File size:7'521 bytes
SHA256 hash: cd98f4a86b1aef53afdcb24a5a8ba206d1edf8228d3947c785a70872b6ce5d41
MD5 hash: edf3631f5f5cb61fc344fb0fd8f4db7a
MIME type:text/xml
Signature RedLineStealer
File name:wettestAnimismBubales.xml
File size:31'070 bytes
SHA256 hash: 399005b0bd197b36fa1a3bc089b1405a85f7a39810b16469be0c843d37b17c93
MD5 hash: 2549c602efeb93ce329114a22ba0bedd
MIME type:text/xml
Signature RedLineStealer
File name:kitharaSchist.xml
File size:33'060 bytes
SHA256 hash: 5fb64e0ff5dbe28a5122bfd7ac32be9be952cdb892789ed355fb6a53d975c78a
MD5 hash: 8edba6e1bd335061e395599eb52cccf3
MIME type:text/xml
Signature RedLineStealer
File name:inisle.xml
File size:43'612 bytes
SHA256 hash: eed911ad7bd607a3a006caeb793a37d6403219feed4783d159760b7107ffc5fa
MD5 hash: 812bf5e3cbf7abe701485860c8089639
MIME type:text/xml
Signature RedLineStealer
File name:soddensBulgesImponed.xml
File size:26'704 bytes
SHA256 hash: b34673ca7b5ee80f1ae4b1ed392f612119748a2665a8a6b29ff4b6029918b2b6
MD5 hash: 3e48302cd699073891f66aa971af63d6
MIME type:text/xml
Signature RedLineStealer
File name:nitricPraxis.xml
File size:40'753 bytes
SHA256 hash: f664db037611bc1f0eaea9d28748c317d5250c322c8118a967ba419b62343a43
MD5 hash: 20919049a30a2b7ee6b19865fa9cc9b4
MIME type:text/xml
Signature RedLineStealer
File name:mappyMontu.xml
File size:82'639 bytes
SHA256 hash: afd9cb242e19894501aead3721439e6461e4c1764c02213de95a2e8ae3d1ac5e
MD5 hash: d442cde35dd5b36e6c287230cd4643d2
MIME type:text/xml
Signature RedLineStealer
File name:evenersSteek.xml
File size:26'421 bytes
SHA256 hash: 5d7801e7904a8d4d5ae58319890973b153b0ddff37cec8f1d11f214bdfbcc405
MD5 hash: 3c6b7ef5b7b7386fa23a254f0785f0eb
MIME type:text/xml
Signature RedLineStealer
File name:pyoses.xml
File size:14'588 bytes
SHA256 hash: 1662a704c24476af38d06dbfffafa05c426a2b5e9aa52caeff53450c11d1e450
MD5 hash: 0cff9b1cb3ba25f8c1db896f558beeec
MIME type:text/xml
Signature RedLineStealer
File name:oakland.xml
File size:124'337 bytes
SHA256 hash: ca242d8c15880cfc11617c149639a27353720cc16f6c7311b503075d9b3b691d
MD5 hash: 8ba499b320dab78f8b2f717ac00c3965
MIME type:text/xml
Signature RedLineStealer
File name:mosseryAgeeNubbin.xml
File size:37'633 bytes
SHA256 hash: 7d7fb3499a155df9f9a2aff6f28e92a1691063e3861b8a3d580f2a77996e243f
MD5 hash: f747545b7ccd3aad93bf91e2d862c5af
MIME type:text/xml
Signature RedLineStealer
File name:burke.xml
File size:717 bytes
SHA256 hash: 5e9515c95fd5bf03da1256d72e82b3e18212c0e34570c2a450a82deb3fab6427
MD5 hash: 2410deabc8fcbbf6221616c734a2e8d1
MIME type:text/xml
Signature RedLineStealer
File name:besnowsIncute.xml
File size:51'451 bytes
SHA256 hash: 622a12687c160272d7fdad416487a8c8f9970d9f73688a32e8e241f834d4764a
MD5 hash: 3e63d7084389f852a049d474c1305a0c
MIME type:text/xml
Signature RedLineStealer
File name:tetrixBisleyCajava.xml
File size:64'553 bytes
SHA256 hash: fe44c59a5d8883f3bcdbd2ea93a6bc6eff8bdaa26def5ad689c2c02128429600
MD5 hash: 58288f4649ae26fa57707e4f389c84e0
MIME type:text/xml
Signature RedLineStealer
File name:ascella.xml
File size:43'080 bytes
SHA256 hash: 43b041430e48116589981ae3ed9243290fe73770d415bc417a5dfe5374a4d3d7
MD5 hash: 3e3820021649815a4ec84147fd397696
MIME type:text/xml
Signature RedLineStealer
File name:ribat.xml
File size:52'315 bytes
SHA256 hash: 6a67625bc47906825db1b074e96fdc98bc2775c3538c97b4aa047627ab30a700
MD5 hash: 852d2e02e4196d3a0799fc3252f8cf55
MIME type:text/xml
Signature RedLineStealer
File name:causers.xml
File size:33'954 bytes
SHA256 hash: bd34fc5f18efecda83d883491563ccadc888499f43217e4250921723d8f2880b
MD5 hash: f1b2935342aa828ab7cbfdca19e0ea2a
MIME type:text/xml
Signature RedLineStealer
File name:oldersYavapaiRehete.xml
File size:88'021 bytes
SHA256 hash: aa46d7721c90eeeaca88dfdeb4f5b892e100a074689d55259c7923e9ca297902
MD5 hash: 0c6874667bf6c7980c6009a70591fff9
MIME type:text/xml
Signature RedLineStealer
File name:oozing.xml
File size:22'452 bytes
SHA256 hash: acb62f47e454c74770f0bb5cde67f17eba0d51e2a56132f59a479a48722b1690
MD5 hash: 821640eeee8dbbe30d0aba29e82fccdf
MIME type:text/xml
Signature RedLineStealer
File name:abucco.xml
File size:58'695 bytes
SHA256 hash: 2f9b411dffdd7dcc6388cef1ca30e2b5e779f11cfaeb6592f83e05911b6ec66a
MD5 hash: 37a5daa0078c6a738dac2b08d2481cbb
MIME type:text/xml
Signature RedLineStealer
File name:emetinKanganiMashal.xml
File size:61'380 bytes
SHA256 hash: 9ad4f6e881d990a77ff1326bcb11ee395d482a1c0eba5184eab69af7ee83fc0c
MD5 hash: 1f6f6fa0253f254a2777702d250231c8
MIME type:text/xml
Signature RedLineStealer
File name:appointZoogamySch.xml
File size:26'008 bytes
SHA256 hash: fae0fcf08e8a768b80d7ffca6c557f2e4888819739b6e029d4ad6679026f5bad
MD5 hash: 5b76235edb7f7e8a932d639133871a06
MIME type:text/xml
Signature RedLineStealer
File name:ferigeeBurping.xml
File size:223 bytes
SHA256 hash: 275d5721ea920a6787f120b4578f3352c3a127163bcf8e3411a5158e690acd81
MD5 hash: 6ed265de428b788870778f7a1248c021
MIME type:text/xml
Signature RedLineStealer
File name:isoetesStage.xml
File size:8'281 bytes
SHA256 hash: da446a9d06f666481135c046e019fe5fa1dca504a6a0c0e4bda98bf9de6adf9f
MD5 hash: 9ae834857471a23836de4871492e688b
MIME type:text/xml
Signature RedLineStealer
File name:lockTwingle.xml
File size:31'340 bytes
SHA256 hash: 5792946f92bf83c64659ffbc80b0d0c57991551233eaea1c7c3b3ef61f2d3b88
MD5 hash: 4c0be8ce9f084379fb933210810009dc
MIME type:text/xml
Signature RedLineStealer
File name:timiderStoasPiotty.xml
File size:81'814 bytes
SHA256 hash: 228ced29571ad3b986a4294be89a5f4dfb1955663ad4788b0db9e7937f05321f
MD5 hash: 6c570f1ee396ecedcfa80b5887ff4310
MIME type:text/xml
Signature RedLineStealer
File name:woundly.xml
File size:27'191 bytes
SHA256 hash: 2cc96fbef2aefc11fdc4ad2cfa2776976e15b5cb3bb5f769952ed01c729f1e8b
MD5 hash: b78266e48af42de73f0ca722d2265a69
MIME type:text/xml
Signature RedLineStealer
File name:bummie.xml
File size:74'322 bytes
SHA256 hash: a945f696ee95295841e474dd4c1665dbb99c94f5544a6ba21b9813fe1e1ef1cd
MD5 hash: d004b504418492d51fb8844c93ade2da
MIME type:text/xml
Signature RedLineStealer
File name:affinesMailingPiment.xml
File size:27'313 bytes
SHA256 hash: 2024e8367713af4e863f6e03145a8ec4fdf2b1ce9429b2bff73880593e44b3ce
MD5 hash: f3a587a88d1c54fd809b18abf0721e34
MIME type:text/xml
Signature RedLineStealer
File name:siculaJackeen.xml
File size:27'256 bytes
SHA256 hash: 3d098987c7620444ffb7af8acaab0fa160004ebefaf2639a006bb472d3de145e
MD5 hash: 31dbb5ee6d6cdaae3eec45bd59763a49
MIME type:text/xml
Signature RedLineStealer
File name:utrechtRattler.xml
File size:53'590 bytes
SHA256 hash: 018377216d117395377fa8ae4b85bc5e2a3844b34dafc02f651b8e9a09ec563c
MD5 hash: 032cf595feafa01b476f9bd45ab546d7
MIME type:text/xml
Signature RedLineStealer
File name:writerAcerateAdnouns.xml
File size:9'055 bytes
SHA256 hash: b278563c4d719d6c820ab53a09b502a2215c45af1233559442d7fad434a69c67
MD5 hash: cc5eeb0ef8ce20b493638c382b309b5c
MIME type:text/xml
Signature RedLineStealer
File name:dowfart.xml
File size:122'182 bytes
SHA256 hash: ea2d516ebeb013703093da71db24dc2972bc05e9702db09ba28c120119dedfe4
MD5 hash: 5263bf5dfb6c63cf46d2b1a59c21f0e4
MIME type:text/xml
Signature RedLineStealer
File name:spoiltRentedDiddies.xml
File size:17'476 bytes
SHA256 hash: a72428978dfbd714314467c4a46f0404c4eb3541afc245ab12c8b5e450b8adfe
MD5 hash: 597ea015633d12d92c1ad4a97e354be2
MIME type:text/xml
Signature RedLineStealer
File name:flutist.xml
File size:28'444 bytes
SHA256 hash: 7be029d16f9ece0329f83e32b9373bda800c8b83d82e2272156aa5d07cc8d23a
MD5 hash: a6ee4c28d3037136ee6363262022d02d
MIME type:text/xml
Signature RedLineStealer
File name:odylAdorn.xml
File size:60'076 bytes
SHA256 hash: 2cadefa8018492bdab8770a0f4043bd7965f487ea1345d7b127c4710be0db90c
MD5 hash: 4cbe54cb8eb8a03ab718d769e89aff70
MIME type:text/xml
Signature RedLineStealer
File name:ileum.xml
File size:47'705 bytes
SHA256 hash: 557dee242965f87a54f4e973b8f204b3861dd971fb2468a5ef0ebebe15b969b3
MD5 hash: ab24530010a44231968e2d764d3efa8a
MIME type:text/xml
Signature RedLineStealer
File name:quietGuam.xml
File size:10'221 bytes
SHA256 hash: 645cbb0a6ed23c795dfcb5d20ff1f742a89617001212d0a35a86852904654e8b
MD5 hash: 68ba0687914a81f28da7f1171aa6fc98
MIME type:text/xml
Signature RedLineStealer
File name:pulton.xml
File size:61'178 bytes
SHA256 hash: 6ae6301712b9eb25bd72ac99c016d3dfab5ce6694ab503f8f8d6affec9941278
MD5 hash: c93e0c7ff8a3d1abe55355d4e85c6fe6
MIME type:text/xml
Signature RedLineStealer
File name:Document.pdf.scr
Pumped file This file is pumped. MalwareBazaar has de-pumped it.
File size:665'570'620 bytes
SHA256 hash: 5a6d36ea0d7fdc5bdb565490c09c17d77eaf115ed69b096d043ff66d17312d1a
MD5 hash: de44bfeed803bd3ba1d2aa1b34ec20c1
De-pumped file size:333'824 bytes (Vs. original size of 665'570'620 bytes)
De-pumped SHA256 hash: 664d0619c828563ef17baef1f819bb5c1216012aaabbf6d8e52ee1db84683773
De-pumped MD5 hash: 7f550eea3d043c7082eabc558fe0b905
MIME type:application/x-dosexec
Signature RedLineStealer
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Generic
Status:
Suspicious
First seen:
2023-01-21 14:07:38 UTC
File Type:
Binary (Archive)
Extracted files:
137
AV detection:
5 of 39 (12.82%)
Threat level:
  5/5
Result
Malware family:
redline
Score:
  10/10
Tags:
family:redline botnet:anim infostealer spyware
Behaviour
Checks processor information in registry
Enumerates system info in registry
Suspicious behavior: EnumeratesProcesses
Suspicious use of AdjustPrivilegeToken
Suspicious use of WriteProcessMemory
Drops file in Windows directory
Suspicious use of NtSetInformationThreadHideFromDebugger
Suspicious use of SetThreadContext
Accesses cryptocurrency files/wallets, possible credential harvesting
Blocklisted process makes network request
RedLine
Malware Config
C2 Extraction:
195.133.40.102:28256
Please note that we are no longer able to provide a coverage score for Virus Total.

YARA Signatures


MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:pe_imphash
Rule name:Skystars_Malware_Imphash
Author:Skystars LightDefender
Description:imphash

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments