redline | 2110d6e57374a5395d23fa7180b43658e596df23808858a87bc2c13c63c61256 | Triage

Sharing

General

Target

1148-54-0x0000000000280000-0x00000000002B0000-memory.dmp
Size

192KB
Sample

240313-men1fsah8y
MD5

dd8e1debf40154f17c5a20426788e1c6
SHA1

9a7809e1f41beee9f41edd61a9f72276a4ccc5e8
SHA256

2110d6e57374a5395d23fa7180b43658e596df23808858a87bc2c13c63c61256
SHA512

b53d1c5633993868f2d06dca5f6680672d8e85edb33caca5634107e5223ddd2e35dda2b974cbedf1b98dfe8174ae9997765ef2f41820e376404df47919d578bb
SSDEEP

1536:WhbEey6y36sv0W7TDGOIrHuyk7xk2W5/uGxNFVYQffbuclGHQ4N0GkRP8e8h3:WlEebE6Cyk9i5/uGxNMS3azNM8e8h3

Score

10^/10

redline bruno microsoft phishing

Malware Config

Extracted

Family

redline

Botnet

bruno

C2

83.97.73.134:19071

Attributes

auth_value
b23e240c277e85ce9d49d6165c0a2b48

Targets

- Target
  
  1148-54-0x0000000000280000-0x00000000002B0000-memory.dmp
- Size
  
  192KB
- MD5
  
  dd8e1debf40154f17c5a20426788e1c6
- SHA1
  
  9a7809e1f41beee9f41edd61a9f72276a4ccc5e8
- SHA256
  
  2110d6e57374a5395d23fa7180b43658e596df23808858a87bc2c13c63c61256
- SHA512
  
  b53d1c5633993868f2d06dca5f6680672d8e85edb33caca5634107e5223ddd2e35dda2b974cbedf1b98dfe8174ae9997765ef2f41820e376404df47919d578bb
- SSDEEP
  
  1536:WhbEey6y36sv0W7TDGOIrHuyk7xk2W5/uGxNFVYQffbuclGHQ4N0GkRP8e8h3:WlEebE6Cyk9i5/uGxNMS3azNM8e8h3
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing