Resubmissions

29-11-2024 09:15

241129-k8cs6sxlhx 10

29-12-2023 19:22

231229-x3mgmsdeb9 3

General

  • Target

    0192a57b2c031ccedccbe3577f139d26

  • Size

    19.6MB

  • Sample

    241129-k8cs6sxlhx

  • MD5

    0192a57b2c031ccedccbe3577f139d26

  • SHA1

    f5241b993dc6758ce72883c872cadfa3f0bfcabe

  • SHA256

    84cb3224104c4d3d8c3bb0ef6a7707686b96a5b367c569e16e27845da5b895f4

  • SHA512

    27ab5d5a915bdb572e96211ff3f6a93c80ced0780b7c6fbf0c0daded74f3c02bc4a9b8eb3ff98b6036a6ee9bec685a096baf550596bf0178d6feaf7c31fc3e6c

  • SSDEEP

    393216:ISp032PY8wkTSIAyLOSyF7p2Z18x/oaZ3OQNyQp9ELKgR/SvzMkkW:vp032g8wJ7wOBF7p278xMQxlglSLoW

Score
10/10

Malware Config

Extracted

Family

xred

C2

xred.mooo.com

Attributes
  • email

    [email protected]

  • payload_url

    http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

    https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

    http://xred.site50.net/syn/SUpdate.ini

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

    https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

    http://xred.site50.net/syn/Synaptics.rar

    https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

    https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

    http://xred.site50.net/syn/SSLLibrary.dll

Targets

    • Target

      0192a57b2c031ccedccbe3577f139d26

    • Size

      19.6MB

    • MD5

      0192a57b2c031ccedccbe3577f139d26

    • SHA1

      f5241b993dc6758ce72883c872cadfa3f0bfcabe

    • SHA256

      84cb3224104c4d3d8c3bb0ef6a7707686b96a5b367c569e16e27845da5b895f4

    • SHA512

      27ab5d5a915bdb572e96211ff3f6a93c80ced0780b7c6fbf0c0daded74f3c02bc4a9b8eb3ff98b6036a6ee9bec685a096baf550596bf0178d6feaf7c31fc3e6c

    • SSDEEP

      393216:ISp032PY8wkTSIAyLOSyF7p2Z18x/oaZ3OQNyQp9ELKgR/SvzMkkW:vp032g8wJ7wOBF7p278xMQxlglSLoW

    Score
    1/10

MITRE ATT&CK Matrix

Tasks