xred | Stix_0_Delay_Utility[.]exe

General

Target

Stix_0_Delay_Utility.exe
Size

1.1MB
MD5

50c9b94b577071cb68e2c2d3d37e5d88
SHA1

682da2c903e1d00955fd233e7df627832af5feb1
SHA256

e370849ba5b1e66d2dc46b4dabd846676089a9bec040e750fadf095b7ec4d222
SHA512

66ea317daa6daafa406ddb4e0db861839c284435284369362368a5484dbd5dc988d34e0772e5a822549bbcacd3ff6e340a465b9043f50bf6ccde518f3fdcf8d7
SSDEEP

24576:pnsJ39LyjbJkQFMhmC+6GD9+oxobd6YvdRFC:pnsHyjtk2MYC5GDQoi6crFC

Score

10^/10

xred

Family

xred

C2

xred.mooo.com

Attributes

email
[email protected]
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

http://xred.site50.net/syn/SUpdate.ini

https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

http://xred.site50.net/syn/Synaptics.rar

https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

http://xred.site50.net/syn/SSLLibrary.dll

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
Stix_0_Delay_Utility.exe