redline | cf25d1bedbf0a0168c46cd6e589371df94074d39a99fb0f4760f1efe6266bf3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2548-43-0x00000000001B0000-0x00000000001E0000-memory.dmp
Size

192KB
Sample

230919-y8zjtsbh6y
MD5

a5d1a30fde618c1aad5e1d5ec736e731
SHA1

2d4fd59ae2ec194bff1992f7d72c5adcfd00f3ea
SHA256

cf25d1bedbf0a0168c46cd6e589371df94074d39a99fb0f4760f1efe6266bf3c
SHA512

f99202240638f0d233d705d428cbada8b0b7c389b04431d20b576c43b1c94fcb7b4de5868839ea2f9af9dedd10fe7afab89762ad9b9036d482d547402cd8d8fc
SSDEEP

3072:8w4wJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1Jt8e8h3:85zAmmI0k7vVe0E0YIM1H

Score

10^/10

redline lux3 microsoft phishing

Malware Config

Extracted

Family

redline

Botnet

lux3

C2

176.123.9.142:14845

Attributes

auth_value
e94dff9a76da90d6b000642c4a52574b

Targets

- Target
  
  2548-43-0x00000000001B0000-0x00000000001E0000-memory.dmp
- Size
  
  192KB
- MD5
  
  a5d1a30fde618c1aad5e1d5ec736e731
- SHA1
  
  2d4fd59ae2ec194bff1992f7d72c5adcfd00f3ea
- SHA256
  
  cf25d1bedbf0a0168c46cd6e589371df94074d39a99fb0f4760f1efe6266bf3c
- SHA512
  
  f99202240638f0d233d705d428cbada8b0b7c389b04431d20b576c43b1c94fcb7b4de5868839ea2f9af9dedd10fe7afab89762ad9b9036d482d547402cd8d8fc
- SSDEEP
  
  3072:8w4wJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1Jt8e8h3:85zAmmI0k7vVe0E0YIM1H
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing