redline | 261485c3cfc1fb8753ba3e984b4d32dffc485a0a66da25dc0174c563e76f8cff | Triage

Sharing

General

Target

3064-41-0x0000000000220000-0x0000000000250000-memory.dmp
Size

192KB
Sample

231012-xtklpaca24
MD5

2bee6f5446dad8ee7a8f5820cecc781d
SHA1

675924021678a1de4b828e448e270349b306646c
SHA256

261485c3cfc1fb8753ba3e984b4d32dffc485a0a66da25dc0174c563e76f8cff
SHA512

2c3874cb0cf4b03c4a40b59b4521d2444ac780b724f71e85f7f27da43b85b193662e45c3060c5b2a99f34035ee0bcd2873640cf11871bde474df80ae1ce5dfc7
SSDEEP

3072:8wSwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1JS8e8h3:83zAmmI0k7vVe0E0YIM1k

Score

10^/10

redline lux3 microsoft phishing

Malware Config

Extracted

Family

redline

Botnet

lux3

C2

176.123.9.142:14845

Attributes

auth_value
e94dff9a76da90d6b000642c4a52574b

Targets

- Target
  
  3064-41-0x0000000000220000-0x0000000000250000-memory.dmp
- Size
  
  192KB
- MD5
  
  2bee6f5446dad8ee7a8f5820cecc781d
- SHA1
  
  675924021678a1de4b828e448e270349b306646c
- SHA256
  
  261485c3cfc1fb8753ba3e984b4d32dffc485a0a66da25dc0174c563e76f8cff
- SHA512
  
  2c3874cb0cf4b03c4a40b59b4521d2444ac780b724f71e85f7f27da43b85b193662e45c3060c5b2a99f34035ee0bcd2873640cf11871bde474df80ae1ce5dfc7
- SSDEEP
  
  3072:8wSwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1JS8e8h3:83zAmmI0k7vVe0E0YIM1k
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing