xred | 0e72c060893ae412a1cba2f0095e8d07d47350bacb568a3e3383b807c38dd0b1

General

Target

0e72c060893ae412a1cba2f0095e8d07d47350bacb568a3e3383b807c38dd0b1
Size

938KB
MD5

6a2f1c3f0e069d648d30706d308336bc
SHA1

0d88c721c68b405abfa7bd6c0dbbcbf3cf70ce88
SHA256

0e72c060893ae412a1cba2f0095e8d07d47350bacb568a3e3383b807c38dd0b1
SHA512

31adecce3fc954ecfb69093e7b9a169b7c4d839a4ce8f59ee155c003bfa93733da68d7cd41b303d4cd42d892ecb56273a31f23faed498f3d9b1151a470c29df8
SSDEEP

12288:/MSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9QlGXd4OvXkLGHj0qTDzZI:/nsJ39LyjbJkQFMhmC+6GD9CGmA0UTPS

Score

10^/10

xred

Family

xred

C2

xred.mooo.com

Attributes

email
[email protected]
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

http://xred.site50.net/syn/SUpdate.ini

https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

http://xred.site50.net/syn/Synaptics.rar

https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

http://xred.site50.net/syn/SSLLibrary.dll

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e72c060893ae412a1cba2f0095e8d07d47350bacb568a3e3383b807c38dd0b1