Overview

overview

10

Static

static

10

newbundle2.exe

windows7-x64

10

newbundle2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    newbundle2.exe

  • Size

    304KB

  • MD5

    58e8b2eb19704c5a59350d4ff92e5ab6

  • SHA1

    171fc96dda05e7d275ec42840746258217d9caf0

  • SHA256

    07d4b7768e13d79ac5f05f81167b29bb6fbf97828a289d8d11eec38939846834

  • SHA512

    e7655762c5f2d10ec246d11f82d437a2717ad05be847b5e0fd055e3241caaca85430f424055b343e3a44c90d76a0ba07a6913c2208f374f59b61f8aa4477889f

  • SSDEEP

    3072:Eq6EgY6iArUjOvWUJwPYT8QADFKoRJTA+tJSiK1cZqf7D34leqiOLibBOT:vqY6iULwP/xnRJTAKJ81cZqf7DIvL

Score
10/10
newbundle2redline

Malware Config

Extracted

Family

redline

Botnet

newbundle2

C2

185.215.113.67:15206

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • newbundle2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections