Overview

overview

10

Static

static

10

cf6077ccea...f0.exe

windows7-x64

1

cf6077ccea...f0.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf6077ccea9ed7a0f38bc72c5dad04eb98177df932b43b82680c294b0d201df0

  • Size

    102KB

  • Sample

    240526-dqg7lscg8w

  • MD5

    2ff7be0edaa586b1f524a26679298edf

  • SHA1

    6aefff158d56c3405ac8624b7e7c9c83a5b5e420

  • SHA256

    cf6077ccea9ed7a0f38bc72c5dad04eb98177df932b43b82680c294b0d201df0

  • SHA512

    84375f46773af2a82b808f8dcc19f965e25e2dafe899a9e129771a1e8ac70a3d4e5d19bd44db73afc45582d552355b728262631cd7dd4e85a170ffdfdf96ef2b

  • SSDEEP

    1536:L0DGkCrBG2IRALcZE3AlB0GFNOEeOSCc+smfspdBbuTxcrCvsrLC:L2CrBGcDARrOEeOGjZrGvOG

Score
10/10
redlinemicrosoftphishing

Malware Config

Extracted

Family

redline

C2

193.106.191.253:4752

Attributes
  • auth_value

    906ed61b62688f5c2978ccc097ad1c57

Targets

    • Target

      cf6077ccea9ed7a0f38bc72c5dad04eb98177df932b43b82680c294b0d201df0

    • Size

      102KB

    • MD5

      2ff7be0edaa586b1f524a26679298edf

    • SHA1

      6aefff158d56c3405ac8624b7e7c9c83a5b5e420

    • SHA256

      cf6077ccea9ed7a0f38bc72c5dad04eb98177df932b43b82680c294b0d201df0

    • SHA512

      84375f46773af2a82b808f8dcc19f965e25e2dafe899a9e129771a1e8ac70a3d4e5d19bd44db73afc45582d552355b728262631cd7dd4e85a170ffdfdf96ef2b

    • SSDEEP

      1536:L0DGkCrBG2IRALcZE3AlB0GFNOEeOSCc+smfspdBbuTxcrCvsrLC:L2CrBGcDARrOEeOGjZrGvOG

    Score
    5/10
    microsoftphishing
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks