xred | 70728d3bdcde6b2d42e8eb6d00f386122f32731809d72d2c7a21468f0c5ef78c | Triage

Resubmissions

29-11-2024 09:12

241129-k6fgaaxkht 10

30-12-2023 22:55

231230-2v5epsaaa4 3

Sharing

General

Target

1f1ac49eac00802e95ab3fa9d7739a3c
Size

1.1MB
Sample

241129-k6fgaaxkht
MD5

1f1ac49eac00802e95ab3fa9d7739a3c
SHA1

a865ee0048f5dd2aa098cda1d1537493af999ffd
SHA256

70728d3bdcde6b2d42e8eb6d00f386122f32731809d72d2c7a21468f0c5ef78c
SHA512

6be91035622c1a3adba0011dc7d50fa69457cbc94de29cd0874a3bf55ad3d9d46485fd0c45f2d164ac49043f4ec06f332fe3e7dd81ffabbe7b6238789cb4d943
SSDEEP

24576:WnsJ39LyjbJkQFMhmC+6GD9mIxcnvXiAFGzNpeAVz:WnsHyjtk2MYC5GDjmn6hp7z

Score

10^/10

xred

Malware Config

Extracted

Family

xred

C2

xred.mooo.com

Attributes

email
[email protected]
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

http://xred.site50.net/syn/SUpdate.ini

https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

http://xred.site50.net/syn/Synaptics.rar

https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

http://xred.site50.net/syn/SSLLibrary.dll

Targets

- Target
  
  1f1ac49eac00802e95ab3fa9d7739a3c
- Size
  
  1.1MB
- MD5
  
  1f1ac49eac00802e95ab3fa9d7739a3c
- SHA1
  
  a865ee0048f5dd2aa098cda1d1537493af999ffd
- SHA256
  
  70728d3bdcde6b2d42e8eb6d00f386122f32731809d72d2c7a21468f0c5ef78c
- SHA512
  
  6be91035622c1a3adba0011dc7d50fa69457cbc94de29cd0874a3bf55ad3d9d46485fd0c45f2d164ac49043f4ec06f332fe3e7dd81ffabbe7b6238789cb4d943
- SSDEEP
  
  24576:WnsJ39LyjbJkQFMhmC+6GD9mIxcnvXiAFGzNpeAVz:WnsHyjtk2MYC5GDjmn6hp7z
Score

1^/10
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1