redline | 2e50b7206f2c29a99e03a9d34b18bd073026b16479d5bfb1583a7d33b8584c40 | Triage

Sharing

General

Target

2768-28-0x0000000000230000-0x0000000000260000-memory.dmp
Size

192KB
Sample

231012-1m879aca8s
MD5

b409c233d1fbb0378aad5d3184a7bd7e
SHA1

91916a9628bdc9addbe03de4ff0745592e081579
SHA256

2e50b7206f2c29a99e03a9d34b18bd073026b16479d5bfb1583a7d33b8584c40
SHA512

71d164fb1ad481489c7958eae9dc4c431e7d00a110d24f3dd2fd23fe5aec679322b121856ebbce7bb13317d5c8fe1bbc6ff0e17947b4bb90b5c6f7a482c7c689
SSDEEP

3072:sR4N7CPvI0YSzSQ02OEBg33G7E0swdBqSsQ5JR8e8hj:sRdvI0YSN0g7E0B2SsQ5D

Score

10^/10

redline microsoft phishing

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes

auth_value
082cde17c5630749ecb0376734fe99c9

Targets

- Target
  
  2768-28-0x0000000000230000-0x0000000000260000-memory.dmp
- Size
  
  192KB
- MD5
  
  b409c233d1fbb0378aad5d3184a7bd7e
- SHA1
  
  91916a9628bdc9addbe03de4ff0745592e081579
- SHA256
  
  2e50b7206f2c29a99e03a9d34b18bd073026b16479d5bfb1583a7d33b8584c40
- SHA512
  
  71d164fb1ad481489c7958eae9dc4c431e7d00a110d24f3dd2fd23fe5aec679322b121856ebbce7bb13317d5c8fe1bbc6ff0e17947b4bb90b5c6f7a482c7c689
- SSDEEP
  
  3072:sR4N7CPvI0YSzSQ02OEBg33G7E0swdBqSsQ5JR8e8hj:sRdvI0YSN0g7E0B2SsQ5D
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing