General
-
Target
0192a57b2c031ccedccbe3577f139d26
-
Size
19.6MB
-
MD5
0192a57b2c031ccedccbe3577f139d26
-
SHA1
f5241b993dc6758ce72883c872cadfa3f0bfcabe
-
SHA256
84cb3224104c4d3d8c3bb0ef6a7707686b96a5b367c569e16e27845da5b895f4
-
SHA512
27ab5d5a915bdb572e96211ff3f6a93c80ced0780b7c6fbf0c0daded74f3c02bc4a9b8eb3ff98b6036a6ee9bec685a096baf550596bf0178d6feaf7c31fc3e6c
-
SSDEEP
393216:ISp032PY8wkTSIAyLOSyF7p2Z18x/oaZ3OQNyQp9ELKgR/SvzMkkW:vp032g8wJ7wOBF7p278xMQxlglSLoW
Malware Config
Extracted
xred
xred.mooo.com
-
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1
http://xred.site50.net/syn/SUpdate.ini
https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1
http://xred.site50.net/syn/Synaptics.rar
https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1
http://xred.site50.net/syn/SSLLibrary.dll
Signatures
-
Xred family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0192a57b2c031ccedccbe3577f139d26
Headers
Sections