xred | bbf9f92d9584f00a819534f9e2c17dadcb6ef663884d596969edd803cc043598 | Triage

Resubmissions

29-11-2024 09:18

241129-k9wyfasngp 10

28-12-2023 03:32

231228-d3k42acfhl 3

Sharing

General

Target

c03e3d11a929b5dac68d9c7ea7a2db93
Size

1.0MB
Sample

241129-k9wyfasngp
MD5

c03e3d11a929b5dac68d9c7ea7a2db93
SHA1

e4a929498df9d9d256ac010147652f53735a5159
SHA256

bbf9f92d9584f00a819534f9e2c17dadcb6ef663884d596969edd803cc043598
SHA512

7b06c5443dd5d6f638203bf423e0b18437715b7adf6793c5fbf91366b282bfc07d614ed8949b62685de74f7daf7f2f72ead93bbf51d757b14d5619a651d1a451
SSDEEP

24576:6nsJ39LyjbJkQFMhmC+6GD9ic40RDI1pE:6nsHyjtk2MYC5GDEl3w

Score

10^/10

xred

Malware Config

Extracted

Family

xred

C2

xred.mooo.com

Attributes

email
[email protected]
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

http://xred.site50.net/syn/SUpdate.ini

https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

http://xred.site50.net/syn/Synaptics.rar

https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

http://xred.site50.net/syn/SSLLibrary.dll

Targets

- Target
  
  c03e3d11a929b5dac68d9c7ea7a2db93
- Size
  
  1.0MB
- MD5
  
  c03e3d11a929b5dac68d9c7ea7a2db93
- SHA1
  
  e4a929498df9d9d256ac010147652f53735a5159
- SHA256
  
  bbf9f92d9584f00a819534f9e2c17dadcb6ef663884d596969edd803cc043598
- SHA512
  
  7b06c5443dd5d6f638203bf423e0b18437715b7adf6793c5fbf91366b282bfc07d614ed8949b62685de74f7daf7f2f72ead93bbf51d757b14d5619a651d1a451
- SSDEEP
  
  24576:6nsJ39LyjbJkQFMhmC+6GD9ic40RDI1pE:6nsHyjtk2MYC5GDEl3w
Score

1^/10
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1