General

  • Target

    09325c29e14f62ce8681ffe43fb6194ab8b9ccab774fed6d4d94bda8e2acff8b.exe

  • Size

    1.2MB

  • Sample

    241219-bf4azszmex

  • MD5

    b9935b7aaf1519781cb2b6d4b8edfd2b

  • SHA1

    e3f324f065f20f34745b882b572f18a8b0468ed0

  • SHA256

    09325c29e14f62ce8681ffe43fb6194ab8b9ccab774fed6d4d94bda8e2acff8b

  • SHA512

    c5f5dfbbfba5a8ce5dd177db35cfe8afe2660117be1ef634043c4f6b3266e2de101ad6a807ea293daa25699dbdc2fc14f815c19c8205a545ea7c025b64a8e060

  • SSDEEP

    24576:PFOajnsJ39LyjbJkQFMhmC+6GD9Kel3+s0DvfeUYqcZQCGm4YN:tfnsHyjtk2MYC5GDL3Svfe41YN

Score
10/10

Malware Config

Extracted

Family

xred

C2

xred.mooo.com

Attributes
  • email

    [email protected]

  • payload_url

    http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

    https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

    http://xred.site50.net/syn/SUpdate.ini

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

    https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

    http://xred.site50.net/syn/Synaptics.rar

    https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

    https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

    http://xred.site50.net/syn/SSLLibrary.dll

Targets

    • Target

      09325c29e14f62ce8681ffe43fb6194ab8b9ccab774fed6d4d94bda8e2acff8b.exe

    • Size

      1.2MB

    • MD5

      b9935b7aaf1519781cb2b6d4b8edfd2b

    • SHA1

      e3f324f065f20f34745b882b572f18a8b0468ed0

    • SHA256

      09325c29e14f62ce8681ffe43fb6194ab8b9ccab774fed6d4d94bda8e2acff8b

    • SHA512

      c5f5dfbbfba5a8ce5dd177db35cfe8afe2660117be1ef634043c4f6b3266e2de101ad6a807ea293daa25699dbdc2fc14f815c19c8205a545ea7c025b64a8e060

    • SSDEEP

      24576:PFOajnsJ39LyjbJkQFMhmC+6GD9Kel3+s0DvfeUYqcZQCGm4YN:tfnsHyjtk2MYC5GDL3Svfe41YN

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks