xred | 100620cd1016f9b7aed030b8eced2afd[.]bin

General

Target

100620cd1016f9b7aed030b8eced2afd.bin
Size

5.1MB
MD5

404c780aa564292647753825fbdd3096
SHA1

83144c76e115fbf81686b587418154d64023c174
SHA256

a41dab9a226dea6ed0d4d0673f32d2850b6db46059661587ec252dc60c2c8630
SHA512

6213224a8d3728af7e07a89f96a24c572aa6f727602c03d2d10dab1bb91aa9be253b2e385bb7b82236a63c3c222090f0a1c12f9f595c1de04e0c54acdfa7467e
SSDEEP

98304:KToNWfGD32tX3nN+bbpucLYk4aEzgeBa6Jaf1bITrFnM02luf0D:KToIfYqHN+Zu2EzgfCadbITrdMC8

Score

10^/10

xred

Family

xred

C2

xred.mooo.com

Attributes

email
[email protected]
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

http://xred.site50.net/syn/SUpdate.ini

https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

http://xred.site50.net/syn/Synaptics.rar

https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

http://xred.site50.net/syn/SSLLibrary.dll

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/457a62394c53eba3c5ef6d569230487c17aaabc837a4a9361670b1c2ee9f5c34.exe