redline | 71b9933db9024e32c632ea1ba20cf62b22016075ffb170c8d07bc14f19373dc0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1592-97-0x0000000000290000-0x00000000002C0000-memory.dmp
Size

192KB
Sample

240313-ndmlnsde74
MD5

05d60fd8da6be477b6929d58b45c849b
SHA1

42e8f81f8320dfc882f95de3039c15212886206f
SHA256

71b9933db9024e32c632ea1ba20cf62b22016075ffb170c8d07bc14f19373dc0
SHA512

dbf06fb5aee57c85fccb6d7a5795e56807862d58524a940cb62aef3bec1f5fda7c334c3f77057027b3710392c59e2f5be10f68c7db80cdac33ff1794b0fb18d2
SSDEEP

1536:ehbEey6y36sv0W7TDGOIrHuyk7xk2W5/uGxNFVYQffbuclGHQ4N0GkR08e8h3:elEebE6Cyk9i5/uGxNMS3azNH8e8h3

Score

10^/10

redline bruno microsoft phishing

Malware Config

Extracted

Family

redline

Botnet

bruno

C2

83.97.73.134:19071

Attributes

auth_value
b23e240c277e85ce9d49d6165c0a2b48

Targets

- Target
  
  1592-97-0x0000000000290000-0x00000000002C0000-memory.dmp
- Size
  
  192KB
- MD5
  
  05d60fd8da6be477b6929d58b45c849b
- SHA1
  
  42e8f81f8320dfc882f95de3039c15212886206f
- SHA256
  
  71b9933db9024e32c632ea1ba20cf62b22016075ffb170c8d07bc14f19373dc0
- SHA512
  
  dbf06fb5aee57c85fccb6d7a5795e56807862d58524a940cb62aef3bec1f5fda7c334c3f77057027b3710392c59e2f5be10f68c7db80cdac33ff1794b0fb18d2
- SSDEEP
  
  1536:ehbEey6y36sv0W7TDGOIrHuyk7xk2W5/uGxNFVYQffbuclGHQ4N0GkR08e8h3:elEebE6Cyk9i5/uGxNMS3azNH8e8h3
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftphishing