Overview

overview

10

Static

static

10

4964-4-0x0...ry.exe

windows7-x64

1

4964-4-0x0...ry.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4964-4-0x00000000001D0000-0x0000000000200000-memory.dmp

  • Size

    192KB

  • Sample

    231011-lbwqfsff74

  • MD5

    f31a0b24016246a93a18ca51e41b731b

  • SHA1

    6f1279b1b974039f02027b2fd425b77b7c410201

  • SHA256

    5bdc723326285985cc28fe029227a2aac45ab48d4031701ba8c18aedc588d69a

  • SHA512

    c2c92feb001c2d258bdb0ce6901f79f5ab992280cbd5f8995e9ce8d9da12fa153e27b1d527d6294899b90d608aa7b0875419f1c9acc61ba8a8d1e011113acde9

  • SSDEEP

    3072:dtDiQVymfI0Vl7l8Oxjs9vzvE0ItgMVysaYyeQCJP8e8hi:dtDiyfI0Vl7lAzvE0nOysaYyeQCt

Score
10/10
redlineinstallsmicrosoftphishing

Malware Config

Extracted

Family

redline

Botnet

installs

C2

77.91.124.151:44308

Attributes
  • auth_value

    6c50f1496dfd731fc870239105cea8e4

Targets

    • Target

      4964-4-0x00000000001D0000-0x0000000000200000-memory.dmp

    • Size

      192KB

    • MD5

      f31a0b24016246a93a18ca51e41b731b

    • SHA1

      6f1279b1b974039f02027b2fd425b77b7c410201

    • SHA256

      5bdc723326285985cc28fe029227a2aac45ab48d4031701ba8c18aedc588d69a

    • SHA512

      c2c92feb001c2d258bdb0ce6901f79f5ab992280cbd5f8995e9ce8d9da12fa153e27b1d527d6294899b90d608aa7b0875419f1c9acc61ba8a8d1e011113acde9

    • SSDEEP

      3072:dtDiQVymfI0Vl7l8Oxjs9vzvE0ItgMVysaYyeQCJP8e8hi:dtDiyfI0Vl7lAzvE0nOysaYyeQCt

    Score
    5/10
    microsoftphishing
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks