Overview

overview

10

Static

static

10

2588-30-0x...ry.exe

windows7-x64

1

2588-30-0x...ry.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2588-30-0x0000000000300000-0x0000000000330000-memory.dmp

  • Size

    192KB

  • Sample

    231012-sahkrseg51

  • MD5

    dfcc6fb41d40b9aa509b9fa57dc0acec

  • SHA1

    fc457cc98d63a41398ef59bc903d254ab8fcb056

  • SHA256

    8f551dc051ccc81908fadcfcccfc65d6ec1b5b9c3ab7ecbaf29cc714f5dbaa04

  • SHA512

    7b8e224814064f3b45fafd25ae6ece4d5df824309902e563e558f0e0a9e8c93a2514877d17574a093a720ff5844377facd17c4bbf4c7794896962f7113099ca0

  • SSDEEP

    3072:8wgwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1J08e8h3:8JzAmmI0k7vVe0E0YIM1i

Score
10/10
redlinelux3microsoftphishing

Malware Config

Extracted

Family

redline

Botnet

lux3

C2

176.123.9.142:14845

Attributes
  • auth_value

    e94dff9a76da90d6b000642c4a52574b

Targets

    • Target

      2588-30-0x0000000000300000-0x0000000000330000-memory.dmp

    • Size

      192KB

    • MD5

      dfcc6fb41d40b9aa509b9fa57dc0acec

    • SHA1

      fc457cc98d63a41398ef59bc903d254ab8fcb056

    • SHA256

      8f551dc051ccc81908fadcfcccfc65d6ec1b5b9c3ab7ecbaf29cc714f5dbaa04

    • SHA512

      7b8e224814064f3b45fafd25ae6ece4d5df824309902e563e558f0e0a9e8c93a2514877d17574a093a720ff5844377facd17c4bbf4c7794896962f7113099ca0

    • SSDEEP

      3072:8wgwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1J08e8h3:8JzAmmI0k7vVe0E0YIM1i

    Score
    5/10
    microsoftphishing
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks