General

  • Target

    src trill.rar

  • Size

    661.9MB

  • Sample

    241123-zch3msvnct

  • MD5

    8b59934e96d224e34558c7979632c51a

  • SHA1

    77df0b3233cc977a81a5975c7ded7656de1999b3

  • SHA256

    f54602620bffc02f7c00262fe27dd9a0348ff53e395fdea05565f8e346d05df2

  • SHA512

    d685b2a9521e82c2f260d6f4cb5878511b77376d6342e6cb6800261f8e70ab713d094f71f9903803babb869846b63a830484a4efe371697273a2cb78454275fc

  • SSDEEP

    12582912:NJlQluTK1Dys/VRGrmcP2lUl3gc1FcOP5Gb4EGryMJSlPlsSSFz6SdqQ2/jCbAGq:NzTKYWIPqc1CocAJ5FzpdfWVLLVwdM

Score
10/10

Malware Config

Extracted

Family

xred

C2

xred.mooo.com

Attributes
  • email

    [email protected]

  • payload_url

    http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

    https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

    http://xred.site50.net/syn/SUpdate.ini

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

    https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

    http://xred.site50.net/syn/Synaptics.rar

    https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

    https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

    http://xred.site50.net/syn/SSLLibrary.dll

Targets

    • Target

      src trill.rar

    • Size

      661.9MB

    • MD5

      8b59934e96d224e34558c7979632c51a

    • SHA1

      77df0b3233cc977a81a5975c7ded7656de1999b3

    • SHA256

      f54602620bffc02f7c00262fe27dd9a0348ff53e395fdea05565f8e346d05df2

    • SHA512

      d685b2a9521e82c2f260d6f4cb5878511b77376d6342e6cb6800261f8e70ab713d094f71f9903803babb869846b63a830484a4efe371697273a2cb78454275fc

    • SSDEEP

      12582912:NJlQluTK1Dys/VRGrmcP2lUl3gc1FcOP5Gb4EGryMJSlPlsSSFz6SdqQ2/jCbAGq:NzTKYWIPqc1CocAJ5FzpdfWVLLVwdM

    Score
    1/10

MITRE ATT&CK Matrix

Tasks