MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b08740de7bd8d6805ca2c3c8be1db69fbb7aa9bd6aad1c0582881e4196574aa9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b08740de7bd8d6805ca2c3c8be1db69fbb7aa9bd6aad1c0582881e4196574aa9
SHA3-384 hash:	1e162ea3738bdab83d109f959ccbd03b687842fc121ff32fa837ffd013719619b2a258fba966b24342ce70089cccc466
SHA1 hash:	db472e86c3c53ebbf8d74d049fbd8b5b4c8d7261
MD5 hash:	acc451f7b0de769d8e884c81b522b3ff
humanhash:	helium-magazine-asparagus-lemon
File name:	Pearl Land Launcher.pkg
Download:	download sample
File size:	3'038'712 bytes
First seen:	2023-07-06 14:01:53 UTC
Last seen:	Never
File type:	unknown
MIME type:	application/x-xar
ssdeep	49152:Ppoqy+V5dFzMyrC5spMND+MljwVvcf/3THxHWcH1UvzS3ikVPL4eGfbS+4RrPE:PyqfH/lSsqaKq03THxNKzdkVPE2dVE
TLSH	T1F9E533941499AE4DA13A393EF5953FC1A734987B3ECE9963C8F26E92423F2B48404953
Reporter	iamdeadlyz
Tags:	macOS pkg RealstStealer

Iamdeadlyz

Fake Blockchain Games Deliver RedLine Stealer & Realst Stealer - A New macOS Infostealer Malware
https://iamdeadlyz.gitbook.io/malware-research/july-2023/fake-blockchain-games-deliver-redline-stealer-and-realst-stealer-a-new-macos-infostealer-malware

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

109

Origin country :

SG

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Trojan.MAC.Generic.112644.16363.3776.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Application.MAC.Generic.1635.16386.27128.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.MacOS.Agent-ABI.32747.3755.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Trojan.MAC.Generic.112644.29644.7941.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/64a6c95d60057e50068456de/reports/309ccabe-6cba-4d74-972f-42c118824c92/overview

Hybrid Analysis SPR/OSX.KeychainDump

Verdict:

Malicious

Labled as:

SPR/OSX.KeychainDump

Link:

https://www.hybrid-analysis.com/sample/b08740de7bd8d6805ca2c3c8be1db69fbb7aa9bd6aad1c0582881e4196574aa9

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b08740de7bd8d6805ca2c3c8be1db69fbb7aa9bd6aad1c0582881e4196574aa9/

ReversingLabs TitaniumCloud MacOS.Trojan.KeychainDump

Threat name:

MacOS.Trojan.KeychainDump

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-05-22 01:23:52 UTC

File Type:

Binary (Archive)

Extracted files:

17

AV detection:

6 of 38 (15.79%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=wcdubxt33dliaxfcypel4hnwt65xvkn5nkwrybmcrapedfsxjkuq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/b08740de7bd8d6805ca2c3c8be1db69fbb7aa9bd6aad1c0582881e4196574aa9