MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6dcb56ea75e3e2f752b026d60156c329eaf9f523a8c297ea91e761f16e559b74. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


RedLineStealer


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 6dcb56ea75e3e2f752b026d60156c329eaf9f523a8c297ea91e761f16e559b74
SHA3-384 hash: e7d91ee7b197a747f90ee436c7e41cc0fbe8c9ff1dbdcc331e07a5c871ac39f9743d60095dacdcbc486c960edd65f870
SHA1 hash: 36635aebba98f7721748a2799dae992b67479461
MD5 hash: 557d8f41efbdec0435d9cf5f001f0d8a
humanhash: network-pip-spring-delta
File name:ReptileWorld_P2E_0.7.3b KJMGD-ABBAR.rar
Download: download sample
Signature RedLineStealer
Create hunting rule
File size:23'287'903 bytes
First seen:2022-07-01 19:16:51 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 393216:6wMHn8FOp7FwIzDVVryaa5P0Zo0Z8qIX3L03mwtBDd7GNQURravVpyoEYHcmdD2:w+a7FwObr0PWYH3sb+RraNpyoEMV2
TLSH T13537335819B3C941DB1066D05B6F0C4BB472EF7B1383E3572AA375E32A504F9AAC827D
TrID 61.5% (.RAR) RAR compressed archive (v5.0) (8000/1)
38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Reporter iamdeadlyz
Tags:exe pw RW073 rar RedLineStealer ReptileWorld


Avatar
Iamdeadlyz
From reptileworldp2e.com (impersonation of rchronicles.org)
RedLineStealer C&C: 193.124.22.17:23520

Intelligence

File Origin
# of uploads :
1
# of downloads :
360
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Result
Verdict:
MALICIOUS
Gathering data
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=nxfvn2tv4prpouvqe3lacvwdfhvpt5jdvdbjp2ur45q7c3svtn2a._file
Gathering data
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

RedLineStealer

rar 6dcb56ea75e3e2f752b026d60156c329eaf9f523a8c297ea91e761f16e559b74

(this sample)

anyrun
any.run
https://app.any.run/tasks/cd9dfffb-7a9b-46e0-8dbf-d753738e9b49
  
X
https://twitter.com/Iamdeadlyz/status/1542949989483024384
  
Delivery method
Distributed via web download

Comments