General

  • Target

    23cb56c209e6ce28019242817d30abc1

  • Size

    757KB

  • Sample

    241129-k5d7tsxkdt

  • MD5

    23cb56c209e6ce28019242817d30abc1

  • SHA1

    095b02b0b1141ac4289dac2dfa255d070844f3d0

  • SHA256

    4afdca5eb9de14451ded464c25b04ed67c2c34b9f2d176e696023207208599b8

  • SHA512

    08516439f3d66e495d3b5cfb5e40e3d7a112bd92f3261a4d43f8d561c4ccd4e5a95c1641a2331e18e61a0f367e889c2e3cf542434ebb192d5b54a18e2e5eac4f

  • SSDEEP

    12288:BMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9IIf:BnsJ39LyjbJkQFMhmC+6GD9

Score
10/10

Malware Config

Extracted

Family

xred

C2

xred.mooo.com

Attributes
  • email

    [email protected]

  • payload_url

    http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

    https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

    http://xred.site50.net/syn/SUpdate.ini

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

    https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

    http://xred.site50.net/syn/Synaptics.rar

    https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

    https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

    http://xred.site50.net/syn/SSLLibrary.dll

Targets

    • Target

      23cb56c209e6ce28019242817d30abc1

    • Size

      757KB

    • MD5

      23cb56c209e6ce28019242817d30abc1

    • SHA1

      095b02b0b1141ac4289dac2dfa255d070844f3d0

    • SHA256

      4afdca5eb9de14451ded464c25b04ed67c2c34b9f2d176e696023207208599b8

    • SHA512

      08516439f3d66e495d3b5cfb5e40e3d7a112bd92f3261a4d43f8d561c4ccd4e5a95c1641a2331e18e61a0f367e889c2e3cf542434ebb192d5b54a18e2e5eac4f

    • SSDEEP

      12288:BMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9IIf:BnsJ39LyjbJkQFMhmC+6GD9

    Score
    1/10

MITRE ATT&CK Matrix

Tasks