xred | a6ffbf6f6176ed00513a8aecd8ec941edbdf51b5370e132da59b1ff7d60fe09c

General

Target

a6ffbf6f6176ed00513a8aecd8ec941edbdf51b5370e132da59b1ff7d60fe09c
Size

805KB
MD5

b276b7c84d5843d0d9e08cd6eb171f5e
SHA1

0d392470621074956e6da1996132add8ccad8174
SHA256

a6ffbf6f6176ed00513a8aecd8ec941edbdf51b5370e132da59b1ff7d60fe09c
SHA512

04539bb6b3864657fd563c8f9d63ec482556f557adb69afd7c043fb2b4ecb5b699846e57ddb607a6bb70309020545bfb15dbd6d215f543a9b178f2a6bf4f89a7
SSDEEP

12288:iMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9tIXb0TJ3j:insJ39LyjbJkQFMhmC+6GD9PF

Score

10^/10

xred

Family

xred

C2

xred.mooo.com

Attributes

email
[email protected]
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

http://xred.site50.net/syn/SUpdate.ini

https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

http://xred.site50.net/syn/Synaptics.rar

https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

http://xred.site50.net/syn/SSLLibrary.dll

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6ffbf6f6176ed00513a8aecd8ec941edbdf51b5370e132da59b1ff7d60fe09c