xred | Sleezy Cracked temp spoofer[.]exe

General

Target

Sleezy Cracked temp spoofer.exe
Size

786KB
MD5

88182e9317dac3dec77c746461684560
SHA1

c7fe653bf7ec84e9eca05377ca4eb0f153f58b7a
SHA256

5f8b9031c966a67887f5d4d3faacab049e6451d30a4ba52f6610ba4f06a7eaa4
SHA512

b682e256869757b4dc301cc75e4c980b4f6a88a8e389fc95f45e41958ccc0c8af4801729c3320849fb7dc225dc81a88405370abf6b297cf7dbd3411eba526aa3
SSDEEP

12288:2MSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V93C++5oj:2nsJ39LyjbJkQFMhmC+6GD9y++q

Score

10^/10

xred

Family

xred

C2

xred.mooo.com

Attributes

email
[email protected]
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

http://xred.site50.net/syn/SUpdate.ini

https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

http://xred.site50.net/syn/Synaptics.rar

https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

http://xred.site50.net/syn/SSLLibrary.dll

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sleezy Cracked temp spoofer.exe