General

  • Target

    2df2459369042d7ab19359a9ced59d52926ef3406650c62a091ca6b9ba06f74b.exe

  • Size

    982KB

  • Sample

    241123-ncevfatmhy

  • MD5

    502aad962177cc3a629aa8689d5ae057

  • SHA1

    4b9e72f1a4aed96ec36212b113da66156f22ae79

  • SHA256

    2df2459369042d7ab19359a9ced59d52926ef3406650c62a091ca6b9ba06f74b

  • SHA512

    8e3693a9d929e865475d6d2a372e65fa2391b415973fc078a89c1c5baa34d0c4a9564e399ec12a7f998ad8f63122d64749d44acccda8e83a115098b994e78c4b

  • SSDEEP

    24576:Be6wHLyjbJkQFMhmC+6GD904DbcHyho5N:Baryjtk2MYC5GD9XKn

Score
10/10

Malware Config

Extracted

Family

xred

C2

xred.mooo.com

Attributes
  • email

    [email protected]

  • payload_url

    http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

    https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

    http://xred.site50.net/syn/SUpdate.ini

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

    https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

    http://xred.site50.net/syn/Synaptics.rar

    https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

    https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

    http://xred.site50.net/syn/SSLLibrary.dll

Targets

    • Target

      2df2459369042d7ab19359a9ced59d52926ef3406650c62a091ca6b9ba06f74b.exe

    • Size

      982KB

    • MD5

      502aad962177cc3a629aa8689d5ae057

    • SHA1

      4b9e72f1a4aed96ec36212b113da66156f22ae79

    • SHA256

      2df2459369042d7ab19359a9ced59d52926ef3406650c62a091ca6b9ba06f74b

    • SHA512

      8e3693a9d929e865475d6d2a372e65fa2391b415973fc078a89c1c5baa34d0c4a9564e399ec12a7f998ad8f63122d64749d44acccda8e83a115098b994e78c4b

    • SSDEEP

      24576:Be6wHLyjbJkQFMhmC+6GD904DbcHyho5N:Baryjtk2MYC5GD9XKn

    Score
    1/10

MITRE ATT&CK Matrix

Tasks