MB-1d48be9c03830f5749c64e7c002a02a32392892f53fa3a53d4a8664415bf30c5
high
📛 Threat Title
RedLineStealer: A5C45448100C2A173F73D339BBEE9B47.exe
Description
File type: exe. Size: 97792 bytes. Tags: exe, RedLineStealer. Reporter: abuse_ch. First seen: 2026-11-08 10:30:05.
Indicators of Compromise (4)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_imphash
f34d5f2d4577ed6d9ceec516c1f5a744
IOC database
- Type
- hash_imphash
- Value
f34d5f2d4577ed6d9ceec516c1f5a744- First seen
- Last seen
- Attached to this threat
- Appears in
- 1382 threats
- Description
- imphash of URLhaus payload 61d424c2e3c5d8db…
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
1d48be9c03830f5749c64e7c002a02a32392892f53fa3a53d4a8664415bf30c5
IOC database
- Type
- hash_sha256
- Value
1d48be9c03830f5749c64e7c002a02a32392892f53fa3a53d4a8664415bf30c5- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- RedLineStealer
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
66d0a00577a6e7415cfb21b4cf88805bedc34889
IOC database
- Type
- hash_sha1
- Value
66d0a00577a6e7415cfb21b4cf88805bedc34889- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
a5c45448100c2a173f73d339bbee9b47
IOC database
- Type
- hash_md5
- Value
a5c45448100c2a173f73d339bbee9b47- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: exe. Size: 97792 bytes. Tags: exe, RedLineStealer. Reporter: abuse_ch. First seen: 2026-11-08 10:30:05.
Remediations (10)
-
web:attack.mitre.org
RedLine Stealer is an information-stealer malware variant first identified in 2020. [1] [2] [3] RedLine Stealer is a Malware as a Service (MaaS) and was reportedly sold as either a one-time purchase or a monthly subscription service.
-
web:bazaar.abuse.ch
RedLineStealer malware samples MalwareBazaar Database MalwareBazaar tries to identify the malware family (signature) of submitted malware samples. A malware sample can be associated with only one malware family. The page below gives you an overview on malware samples that MalwareBazaar has identified as RedLineStealer . Database Entry
-
web:bazaar.abuse.ch
You are currently viewing the MalwareBazaar entry for SHA256 a5cd964c8a054439dfa9e65370298ddc3cf5ce34c4e2f61c5107c45761acbbdc. While MalwareBazaar tries to identify ...
-
web:boteraser.com
RedLine Stealer propagates primarily through phishing emails containing malicious attachments or links, as well as via cracked software and game cheats distributed on file‑sharing sites. Once executed, it performs process injection (MITRE ATT&CK T1055) into legitimate processes such as explorer.exe or svchost.exe to evade detection.
-
web:ctiwatch.com
RedLine Stealer is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.
-
web:hunt.io
RedLine Stealer is a widely used malware that steals sensitive data such as login credentials, cryptocurrency wallets, and information from applications like FileZilla, Discord, and VPN clients. Distributed through cracked software and phishing campaigns, it also collects system details, making it a significant threat to individuals and organizations alike.
-
web:malwaretips.com
Removal Instructions for Spyware. RedlineStealer This malware removal guide may appear overwhelming due to the number of steps and numerous programs that are being used. We have only written it this way to provide clear, detailed, and easy-to-understand instructions that anyone can use to remove malware for free.
-
web:www.microsoft.com
Deploy endpoint detection and response agents that generate alerts for process hollowing behavior. Configure alerts for Regsvcs.exe, vbc.exe, or other system binaries creating child processes or making outbound network connections. Instruct users to discontinue the use of password managers built into web browsers.
-
web:www.pcrisk.com
RedLine Stealer (also known as RedLine) is a malicious program which can be purchased on hacker forums for $150/$200 depending on the version. It can be used to steal information and infect operating systems with other malware.
-
web:www.youtube.com
Learn how to remove Redline Stealer malware from your computer in this comprehensive guide. Discover the steps to safely remove this malicious software and protect your device from future threats.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.