Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

81bf833aad...a9.exe

windows7-x64

10

81bf833aad...a9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81bf833aadc5468360a9cda7d57a8f47218d35e0c88a7779d4ece816d79448a9

  • Size

    770KB

  • MD5

    2e3aaa2bac7979ffec49d5540404760c

  • SHA1

    e1864bd585022ea04511da46ca5dfed72d424d5f

  • SHA256

    81bf833aadc5468360a9cda7d57a8f47218d35e0c88a7779d4ece816d79448a9

  • SHA512

    c2aac400f260893a7dd158d43a3c9dfcbb5feddad602404c05891c1e7c4c06cb6a890702e9a9cf9c86044ae570e38d0dee7753683457a188bbde7d57f1a024ab

  • SSDEEP

    12288:6MSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V951KE+VI4tPj:6nsJ39LyjbJkQFMhmC+6GD9jKE+VI4tb

Score
10/10
xred

Malware Config

Extracted

Family

xred

C2

xred.mooo.com

Attributes
  • email

    xredline1@gmail.com

  • payload_url

    http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

    https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

    http://xred.site50.net/syn/SUpdate.ini

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

    https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

    http://xred.site50.net/syn/Synaptics.rar

    https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

    https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

    http://xred.site50.net/syn/SSLLibrary.dll

Signatures

  • Xred family
    xred
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 81bf833aadc5468360a9cda7d57a8f47218d35e0c88a7779d4ece816d79448a9
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.