redline | 06214377f5468efb1febb428e1da609372841cb440cba21a23f37de4b4085b44 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3812-31-0x0000000000580000-0x00000000005B0000-memory.dmp
Size

192KB
Sample

230828-k73m7sgf7t
MD5

53231c065700eda83c866fb9a8946b65
SHA1

d0c0e3c59142818c1b066cfed193ba419f484c55
SHA256

06214377f5468efb1febb428e1da609372841cb440cba21a23f37de4b4085b44
SHA512

bf63427179121a1c3b5cd649147a2ab9fbead07b7b3baf0e670362a0b981c33aa2d99ab2efbf23a22e4b5ff84422d73435295a8100c6c819c649e2268b8a6df0
SSDEEP

3072:8wvwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1Js8e8h3:8OzAmmI0k7vVe0E0YIM1a

Score

10^/10

redline lux3 microsoft phishing

Malware Config

Extracted

Family

redline

Botnet

lux3

C2

176.123.9.142:14845

Attributes

auth_value
e94dff9a76da90d6b000642c4a52574b

Targets

- Target
  
  3812-31-0x0000000000580000-0x00000000005B0000-memory.dmp
- Size
  
  192KB
- MD5
  
  53231c065700eda83c866fb9a8946b65
- SHA1
  
  d0c0e3c59142818c1b066cfed193ba419f484c55
- SHA256
  
  06214377f5468efb1febb428e1da609372841cb440cba21a23f37de4b4085b44
- SHA512
  
  bf63427179121a1c3b5cd649147a2ab9fbead07b7b3baf0e670362a0b981c33aa2d99ab2efbf23a22e4b5ff84422d73435295a8100c6c819c649e2268b8a6df0
- SSDEEP
  
  3072:8wvwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1Js8e8h3:8OzAmmI0k7vVe0E0YIM1a
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing