General

  • Target

    470ee74f5b7860612c61d973ca12d32b6d8cccb1caf6828d99d79134d6eed9cb.bin

  • Size

    100KB

  • Sample

    220805-2sxxvaaca7

  • MD5

    72a36d3a94a35cf830b86ff67a34b61b

  • SHA1

    d3e60eb1cf0efc15e0cc51a7c1ec3ed7ae872659

  • SHA256

    470ee74f5b7860612c61d973ca12d32b6d8cccb1caf6828d99d79134d6eed9cb

  • SHA512

    efa84552e665ed95b859f5cd53264421bad8c80ffee5a7639bd47c5f23815eced5d181428c0aae52a49362f6c9028b3a5bcb5f290c1c7b11011ed5c503002180

Malware Config

Extracted

Family

redline

Botnet

NCanal01

C2

pupdatastart.tech:80

pupdatastart.xyz:80

pupdatastar.store:80

Targets

    • Target

      470ee74f5b7860612c61d973ca12d32b6d8cccb1caf6828d99d79134d6eed9cb.bin

    • Size

      100KB

    • MD5

      72a36d3a94a35cf830b86ff67a34b61b

    • SHA1

      d3e60eb1cf0efc15e0cc51a7c1ec3ed7ae872659

    • SHA256

      470ee74f5b7860612c61d973ca12d32b6d8cccb1caf6828d99d79134d6eed9cb

    • SHA512

      efa84552e665ed95b859f5cd53264421bad8c80ffee5a7639bd47c5f23815eced5d181428c0aae52a49362f6c9028b3a5bcb5f290c1c7b11011ed5c503002180

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks