xred | 42079149e4a4100eb6bb0470631b058d9413ace18be392c75c870d91b9020f55 | Triage

Resubmissions

29-11-2024 09:09

241129-k4v4ysslej 10

31-12-2023 08:13

231231-j4eljahbc3 3

Sharing

General

Target

2ea924b5880ac4595f0f0bb0174dd59f
Size

757KB
Sample

241129-k4v4ysslej
MD5

2ea924b5880ac4595f0f0bb0174dd59f
SHA1

7207a015db475fcc9649bab319b57a9b59ed21d9
SHA256

42079149e4a4100eb6bb0470631b058d9413ace18be392c75c870d91b9020f55
SHA512

e0ac98b324967a2bb49c0c6a0b73e85f4b0ed1fa9b9d2539d6e40731a867bd6ac37afe31509d732d4b64815c7729f8d25c03e977988a93c6961672797513bb09
SSDEEP

12288:eMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9I2:ensJ39LyjbJkQFMhmC+6GD9

Score

10^/10

xred

Malware Config

Extracted

Family

xred

C2

xred.mooo.com

Attributes

email
[email protected]
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

http://xred.site50.net/syn/SUpdate.ini

https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

http://xred.site50.net/syn/Synaptics.rar

https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

http://xred.site50.net/syn/SSLLibrary.dll

Targets

- Target
  
  2ea924b5880ac4595f0f0bb0174dd59f
- Size
  
  757KB
- MD5
  
  2ea924b5880ac4595f0f0bb0174dd59f
- SHA1
  
  7207a015db475fcc9649bab319b57a9b59ed21d9
- SHA256
  
  42079149e4a4100eb6bb0470631b058d9413ace18be392c75c870d91b9020f55
- SHA512
  
  e0ac98b324967a2bb49c0c6a0b73e85f4b0ed1fa9b9d2539d6e40731a867bd6ac37afe31509d732d4b64815c7729f8d25c03e977988a93c6961672797513bb09
- SSDEEP
  
  12288:eMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9I2:ensJ39LyjbJkQFMhmC+6GD9
Score

1^/10
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1