Overview

overview

10

Static

static

10

1ce6e133b0...37.exe

windows7-x64

10

1ce6e133b0...37.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ce6e133b0aee819669af334b31e321a44f74020d2e36e43183f7aedd87cc137.7z

  • Size

    5.2MB

  • MD5

    be3bd237e879f004ea89be663492aacb

  • SHA1

    5b18781fd0d6702e18ac9a9a83b1621c641d8373

  • SHA256

    97b7c2b1f5ffd5bae4799483d416012ceede6b2cff5087220e045af1913747ec

  • SHA512

    f15c85a640e98f40009f21e9e9fafd786ad3f05e2ead1cbaee799bfb2f39d9b938f9def1e1678835648ede013cad8c17f365afbde2bf5c71f99c2023f189ee46

  • SSDEEP

    98304:GnzdFMJEa7QiyzRV9CDcQqlPlIQeH+G8mqQ4IOv43T53P033IsZ112svhS:4rMJ7/yzRcqliN78nQUv493PJs1fvo

Score
10/10
xred

Malware Config

Extracted

Family

xred

C2

xred.mooo.com

Attributes
  • email

    [email protected]

  • payload_url

    http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

    https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

    http://xred.site50.net/syn/SUpdate.ini

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

    https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

    http://xred.site50.net/syn/Synaptics.rar

    https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

    https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

    http://xred.site50.net/syn/SSLLibrary.dll

Signatures

  • Xred family
    xred
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1ce6e133b0aee819669af334b31e321a44f74020d2e36e43183f7aedd87cc137.7z
    .7z

    Password: infected

  • 1ce6e133b0aee819669af334b31e321a44f74020d2e36e43183f7aedd87cc137
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections