🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8e68d8e832a057bbf2c40bb2f88095f4a8d065d58be2d118e807bcbbcfbe0d65. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


RedLineStealer


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8e68d8e832a057bbf2c40bb2f88095f4a8d065d58be2d118e807bcbbcfbe0d65
SHA3-384 hash: 75b8db348ee6c386ab9cb892c6c628d7ceba55eddf752ae193cdc1750bc4c2f2a4dadff4dd3bb4d41f6d494cd5de3ee4
SHA1 hash: 4239fb7aed9990190a2d0f51ae5a9a4048784ecd
MD5 hash: 2377f5b336885ff8582a2a0487e54c31
humanhash: oscar-music-item-washington
File name:Fort hack.rar
Download: download sample
Signature RedLineStealer
Create hunting rule
File size:11'821'375 bytes
First seen:2023-01-03 22:30:16 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
Note:This file is a password protected archive. The password is: 9011
ssdeep 196608:8gMpS4d0S1/qGd/OyP4jroGbtwzatOitDDUTFqws8QGSBF4BArhlKQdg:8gModgWE4HazsLUTUgRWD01
TLSH T1C3C63356071D694E73B4EA9FC22C770B81A2F14B42DEB0010259AEEF52C5BC6F6F19B1
TrID 61.5% (.RAR) RAR compressed archive (v5.0) (8000/1)
38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Reporter Zacinquarantine
Tags:pw-9011 rar Redline RedLineStealer


Avatar
Zacinquarantine
cc: https://tria.ge/230103-z5b5ssch82
Password: 9011

File is corrupted and/or protected from analysis.

Intelligence

File Origin
# of uploads :
1
# of downloads :
195
Origin country :
CA CA
File Archive Information

This file archive contains 18 file(s), sorted by their relevance:

File name:sharedassets5.assets
File size:4'436 bytes
SHA256 hash: 292f3516ccaaff28c884ce7679ed3109542918a3edf68253dafd8bf15719d1f6
MD5 hash: 83fab12b772b51e4f86bff8b16a3d5a2
MIME type:application/octet-stream
Signature RedLineStealer
File name:sharedassets1.assets
File size:4'132 bytes
SHA256 hash: 0945de8d2cd62f39edcebca20fd4c6537b5d0d302ad08d5e1d557b9b47be1707
MD5 hash: 95fd07e3c0bf194899a7b1e0e1b3c378
MIME type:application/octet-stream
Signature RedLineStealer
File name:sharedassets2.assets
File size:4'144 bytes
SHA256 hash: 26bf2f6e69ca50630bf49499f0205a2fe977b1a9e5b2aec54d6e3232c7703a80
MD5 hash: f32b2cc972882d5c143fd178ab49f05f
MIME type:application/octet-stream
Signature RedLineStealer
File name:resources.assets
File size:14'992'720 bytes
SHA256 hash: f7cb590f2d3c39ad03d0a1a3f1a4ff59857d1ad688ac3b71762c4d08343e510e
MD5 hash: 7a3a5d14ec9da3e6ec5cff2868981361
MIME type:application/octet-stream
Signature RedLineStealer
File name:sharedassets0.assets
File size:4'132 bytes
SHA256 hash: d23154b08a44ad6f5d83382360890a50c9d64c9767ef29c73a4e16861b48467d
MD5 hash: bcb9ea60cb18d20afd61bc96db42c916
MIME type:application/octet-stream
Signature RedLineStealer
File name:app.info
File size:31 bytes
SHA256 hash: 05fb300e15997b0dbed1738c586b6981c4b4c7c738868ba0f44e78aef2c3b1a2
MD5 hash: d07bc884721caf096fbfc04b2c3cfbbc
MIME type:text/plain
Signature RedLineStealer
File name:v8.dll
File size:1'730'336 bytes
SHA256 hash: c3a0702ddced7d4bcb927faa36ae95517a3c9413116c7b500bdd95bab7709db4
MD5 hash: 133a256ce39cd971b80c92c7ee5365c1
MIME type:application/x-dosexec
Signature RedLineStealer
File name:sharedassets4.assets
File size:4'436 bytes
SHA256 hash: e5dbe561af2b809f2333aaacbc73dcd0379308814aa749b6b3f26493a3bb6293
MD5 hash: 64f86653045f414c87b5a95c1b6cec6b
MIME type:application/octet-stream
Signature RedLineStealer
File name:sharedassets3.assets
File size:4'948 bytes
SHA256 hash: 03a7538e868b812856513384c1b8f048119dfa8a8014d106cce1b7c933463285
MD5 hash: 40b0654c92b5fd79da48120351c8d5ec
MIME type:application/octet-stream
Signature RedLineStealer
File name:sharedassets5.assets.resS
File size:1'048'576 bytes
SHA256 hash: 672ad0b784cefd23dc904af9707362e4904489650358f7e4ac9d585c43f57736
MD5 hash: 102c366c2f25f0eb5813aea66f5a3ce7
MIME type:application/octet-stream
Signature RedLineStealer
File name:sharedassets4.assets.resS
File size:524'288 bytes
SHA256 hash: 19e857d49041c2ccde32a8ccdc4c18bd7264e5592864acd6293b87eff3bb681c
MD5 hash: ee6605bf8c0e3de83fc3190f35fb4387
MIME type:application/octet-stream
Signature RedLineStealer
File name:licenses.json
File size:177'372 bytes
SHA256 hash: 16f4dbc2c6410dab76998a48d1a76cd3b06173afcb21f0857ebce9d1ec9b750d
MD5 hash: d5e8250b4184644fb0d455410737628c
MIME type:application/octet-stream
Signature RedLineStealer
File name:api64lib.dll
File size:105'472 bytes
SHA256 hash: 285aa8225732ddbcf211b1158bd6cff8bf3acbeeab69617f4be85862b7105ab5
MD5 hash: 932ebb3f9e7113071c6a17818342b7cc
MIME type:application/x-dosexec
Signature RedLineStealer
File name:EOSSDK-Win64-Shipping.dll
File size:12'720'384 bytes
SHA256 hash: 5fa0a9c78b5110f34f58c42674abf385d2898ec699b6a880f7fcbab4d32e32b8
MD5 hash: 66f0defa459608d03d75a828cc7f3724
MIME type:application/x-dosexec
Signature RedLineStealer
File name:sharedassets3.assets.resS
File size:393'216 bytes
SHA256 hash: 5f54822430c580b12294bace4c18c656757d1f54725b89dff614189e1ce80e6f
MD5 hash: 62a6a36adb057457335e861283738ba6
MIME type:application/octet-stream
Signature RedLineStealer
File name:api64lib.cdx
File size:239'184 bytes
SHA256 hash: 5c6dabbd723a284d6b9a70303678c60421485bceb51def107f273f0f3730ed28
MD5 hash: 35ba2adf15a1e5207217b38cabbff86c
MIME type:application/x-dosexec
Signature RedLineStealer
File name:dbghelp.dll
File size:123'904 bytes
SHA256 hash: 8a6518ab7419fbec3ac9875baa3afb410ad1398c7aa622a09cd9084ec6cadfcd
MD5 hash: f79f0e3a0361cac000e2d3553753cd68
MIME type:application/x-dosexec
Signature RedLineStealer
File name:Hack.exe
File size:707'584 bytes
SHA256 hash: e522314aa13dad34aefd023f98bae1486109d9fbfc0c15dd7d91f1b38b8b085d
MD5 hash: e15614713895ab09dcd0da3ab1207b8d
MIME type:application/x-dosexec
Signature RedLineStealer
Vendor Threat Intelligence
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8e68d8e832a057bbf2c40bb2f88095f4a8d065d58be2d118e807bcbbcfbe0d65/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=rzunr2bsubl3x4webozpraev6sunazovrprncghia66lxt56bvsq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/8e68d8e832a057bbf2c40bb2f88095f4a8d065d58be2d118e807bcbbcfbe0d65

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

RedLineStealer

rar 8e68d8e832a057bbf2c40bb2f88095f4a8d065d58be2d118e807bcbbcfbe0d65

(this sample)

Malpedia
Malpedia
https://malpedia.caad.fkie.fraunhofer.de/details/win.redline_stealer
  
Dropping
RedLine
  
Delivery method
Distributed via web download

Comments