Overview

overview

10

Static

static

10

1b4fe6ccb6...63.exe

windows7-x64

3

1b4fe6ccb6...63.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b4fe6ccb606f9f033a2789f53c0166e5c6170e83ca642a8acac940e52d7a363.exe

  • Size

    3.0MB

  • MD5

    dc96cfc28f64f3866fbd3f3d1962a5c9

  • SHA1

    c08c0b2ba31b579714c754d54f50747de18f40ad

  • SHA256

    1b4fe6ccb606f9f033a2789f53c0166e5c6170e83ca642a8acac940e52d7a363

  • SHA512

    e32438d5e93200d51261aad303e70e16ac2c13187bfa0098f2e03b35fccd4d69f8b82057f96666c049049c9d7fc08ce3b442224ff2d2aaf293c762c3f2c89ddd

  • SSDEEP

    49152:q+nsHyjtk2MYCIGevWnsHyjtIMYC5GuvunsHyjtk2MYC5GDZJ9DnxNo:xnsmtk2D0nsmtIaEnsmtk2aQ1nxO

Score
10/10
xred

Malware Config

Extracted

Family

xred

C2

xred.mooo.com

Attributes
  • email

    [email protected]

  • payload_url

    http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

    https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

    http://xred.site50.net/syn/SUpdate.ini

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

    https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

    http://xred.site50.net/syn/Synaptics.rar

    https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

    https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

    http://xred.site50.net/syn/SSLLibrary.dll

Signatures

  • Xred family
    xred
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1b4fe6ccb606f9f033a2789f53c0166e5c6170e83ca642a8acac940e52d7a363.exe
    .exe windows:4 windows x86 arch:x86

    8c16c795b57934183422be5f6df7d891


    Headers

    Imports

    Sections