Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

763d52d26e...eb.exe

windows7-x64

10

763d52d26e...eb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    763d52d26e616f36960691cdadab715c5949886c9a4f34f82c6a423d955f59eb

  • Size

    3.3MB

  • MD5

    13e4f43220b31ec4ca52d2091ea4422a

  • SHA1

    a620999b829bce7d072fbbea7e994f8bb318a73c

  • SHA256

    763d52d26e616f36960691cdadab715c5949886c9a4f34f82c6a423d955f59eb

  • SHA512

    3d3a843c0f85ed287d99ab99e1b90cb4a7f39cfaf67f5fb3e119467d3fbacd8910a5f53ed11bb9b2197a81a0a75e8e5b4181470e399a6587b130c302f39d658c

  • SSDEEP

    49152:5nsHyjtk2MYC5GDiCwsbCANnKXferL7Vwe/Gg0P+WhIsABTuXY:5nsmtk2aiws2ANnKXOaeOgmhI1BTuXY

Score
10/10
xred

Malware Config

Extracted

Family

xred

C2

xred.mooo.com

Attributes
  • email

    [email protected]

  • payload_url

    http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

    https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

    http://xred.site50.net/syn/SUpdate.ini

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

    https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

    http://xred.site50.net/syn/Synaptics.rar

    https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

    https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

    http://xred.site50.net/syn/SSLLibrary.dll

Signatures

  • Xred family
    xred
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 763d52d26e616f36960691cdadab715c5949886c9a4f34f82c6a423d955f59eb
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections