xred | 528d25bd07394476f5dfc200fddb781263d11120306611dbf6fadc7864064a65[.]exe

General

Target

528d25bd07394476f5dfc200fddb781263d11120306611dbf6fadc7864064a65.exe
Size

2.4MB
MD5

4e725ff17f13e472be9309e97afc22e0
SHA1

9161348e4ec879df7b0c7f0da8ae1fc0c85c3ff3
SHA256

528d25bd07394476f5dfc200fddb781263d11120306611dbf6fadc7864064a65
SHA512

8a3acef58f4ca6ed7b9d76a56ed362fd996c25b1d87a05a3f962f33c053a743ded68aad18e8f7127d57f539de35999dae6d8314ed8b3d7d8372e160d1aaac389
SSDEEP

49152:nnsHyjtk2MYC5GD/14+yZbWBgo3RFH54jcwcJOi7Wz4xwI+M/ae4:nnsmtk2aA1fyZbWBgo3PH541cJrWz4xu

Score

10^/10

xred

Family

xred

C2

xred.mooo.com

Attributes

email
[email protected]
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

http://xred.site50.net/syn/SUpdate.ini

https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

http://xred.site50.net/syn/Synaptics.rar

https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

http://xred.site50.net/syn/SSLLibrary.dll

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
528d25bd07394476f5dfc200fddb781263d11120306611dbf6fadc7864064a65.exe

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_2