General

  • Target
    riptweakcracked.7z
  • Size 305.3MB
  • Sample241127-vm41msymfj
  • SHA256 3adf1a24d2b6be6d1942dfd603dd4535de000fac2929f8eb8fc8ff6a5448ba07
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • xred

C2
  • xred.mooo.com

Attributes
  • email

    [email protected]

  • payload_url

    http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

    https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

    http://xred.site50.net/syn/SUpdate.ini

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

    https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

    http://xred.site50.net/syn/Synaptics.rar

    https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

    https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

    http://xred.site50.net/syn/SSLLibrary.dll

Targets

    • Target
      riptweakcracked.7z
    • Size 305.3MB
    • SHA256 3adf1a24d2b6be6d1942dfd603dd4535de000fac2929f8eb8fc8ff6a5448ba07
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      riptweakcracked/chrome_100_percent.pak
    • Size 125KB
    • SHA256 d2c299095dbbd3a3cb2b4639e5b3bd389c691397ffd1a681e586f2cfe0e2ab88
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/chrome_200_percent.pak
    • Size 174KB
    • SHA256 f49abd81e93a05c1e53c1201a5d3a12f2724f52b6971806c8306b512bf66aa25
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/icudtl.dat
    • Size 9.9MB
    • SHA256 00f755664926fda5fda14b87af41097f6ea4b20154f90be65d73717580db26ee
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/af.pak
    • Size 125KB
    • SHA256 9e0aeb9d58fecc27d43e39c8c433c444b2ce773cc5d510fc676e0ebbcab4bddf
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/am.pak
    • Size 202KB
    • SHA256 4c0129e1023e6e6cb5b71fadd59026d326fec3393463530c2f30fff8aacaaedd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/ar.pak
    • Size 207KB
    • SHA256 ac44c459f86c577f1f510c0b78a8317127522f0d2f80734b6c9ab338d637d4df
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/bg.pak
    • Size 226KB
    • SHA256 cd6701f8b682b6d677ae2010abfb4bfd19555bb42847e2ffddc54e203d50b373
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/bn.pak
    • Size 291KB
    • SHA256 a40148129ff88aff0ea269ef3ca4fb369e772257655d27dfa29f078270486287
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/ca.pak
    • Size 140KB
    • SHA256 799ac8c1fa9cdd6a0c2e95057c3fc6b54112fe2aebbb1a159d9dac9d1583ca62
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/cs.pak
    • Size 143KB
    • SHA256 c06ac5459d735f7ac7ed352d9f100c17749fa2a277af69c25e7afe0b6954d3c0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/da.pak
    • Size 130KB
    • SHA256 6ee55e456d12246a4ea677c30be952adfb3ab57aca428516e35056e41e7828b5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/de.pak
    • Size 139KB
    • SHA256 6272ed3d0487149874c9400b6f377fec3c5f0a7675be19f8610a8a1acb751403
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/el.pak
    • Size 249KB
    • SHA256 82b3fbbdc73f76eaea8595f8587651e12a5f5f73f27badbc7283af9b7072818c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/en-GB.pak
    • Size 115KB
    • SHA256 7eb6af7620593bdd33cf4a6238e03afbf179097173cbfffdada5b3e25b8f0bbe
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/en-US.pak
    • Size 115KB
    • SHA256 4221cf9bae4ebea0edc1b0872c24ec708492d4fe13f051d1f806a77fe84ca94d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/es-419.pak
    • Size 139KB
    • SHA256 e49a13bee7544583d88301349821d21af779ec2ebfca39ee6a129897b20dbbd0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/es.pak
    • Size 140KB
    • SHA256 e4db8f397cd85fc5575670b3cacfc0c69e4bf07ef54a210e7ae852d2916f1736
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/et.pak
    • Size 126KB
    • SHA256 f2f66a74b2606565365319511d3c40b6accdde43a0af976f8b6ac12e2d92ec9f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/fa.pak
    • Size 199KB
    • SHA256 890ca9da16efc1efcc97ee406f9efa6a8d288f19a2192f89204bdc467e2868d3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/fi.pak
    • Size 129KB
    • SHA256 370164e61142d8609d176ec0cc650540c526156009070563f456bcdb104e9c0f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/fil.pak
    • Size 144KB
    • SHA256 945c0160938c3bcecda6659a411b33cd55dfac18814bed88575bfd100c53d42e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/fr.pak
    • Size 149KB
    • SHA256 d641d9d73262ca65a613ee0395204435d6830316dd551f8992407ae77ead4b64
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/gu.pak
    • Size 282KB
    • SHA256 cd761009ecbd4736b24383f020da05d2e6b9396c67a7ec1f4ac1966943cf9eab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/he.pak
    • Size 174KB
    • SHA256 f6d1e2a269783f27b85c2db2ce9286f581ec2e16586ecac476ab5735cd8ae12f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/hi.pak
    • Size 292KB
    • SHA256 de4b369e012831a5ced3ae02e34fd34374348b016274c99911a294de3f9bee5b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/hr.pak
    • Size 137KB
    • SHA256 3d01f9d2c51efa0c0d8d720dd832493b1b87d2429970396c42cee2199e7bef40
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/hu.pak
    • Size 149KB
    • SHA256 6edcdaf17483c4b7b74d9c728c3f38d9e4704bfbdb618b578c7ccb6bbe6e824f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/id.pak
    • Size 124KB
    • SHA256 fa38d911dec71800d33802441412f20133e960bb316c79161bdc7f78ea1af3d7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/it.pak
    • Size 138KB
    • SHA256 75b37965b88933ba32119ebdd13cb98c54300b1e1e312080947eed6a94fc70b0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/ja.pak
    • Size 164KB
    • SHA256 3849f8b48b034fe6319112eff77b7c9f6a8d7b20cf7bc8400528a0a8458677da
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      riptweakcracked/locales/kn.pak
    • Size 319KB
    • SHA256 407599a388bc151ccd2561181ea90ff620f4cb5c767317af8ca4748927ba7f35
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks