xred | b097eb6bcc9eb5f5fd17a77654739e4e186cfe29afa2168ec72a42c2c8e6b004

General

Target

b097eb6bcc9eb5f5fd17a77654739e4e186cfe29afa2168ec72a42c2c8e6b004
Size

765KB
MD5

033cde990fe1a9d15fa070f9ef142ebb
SHA1

30f3557e1f228b1c4b54f4afd3f4987b53bb0da0
SHA256

b097eb6bcc9eb5f5fd17a77654739e4e186cfe29afa2168ec72a42c2c8e6b004
SHA512

696d35e470fd9c5bb23951ad77930db5933ece144150b5fc613aca92bcc9ac82a03d05411e367a665a58f8d53e225364af67d3bbab0e7c81d7cd8a21223a85f5
SSDEEP

12288:CMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9Q/oj:CnsJ39LyjbJkQFMhmC+6GD9MI

Score

10^/10

xred

Family

xred

C2

xred.mooo.com

Attributes

email
[email protected]
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

http://xred.site50.net/syn/SUpdate.ini

https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

http://xred.site50.net/syn/Synaptics.rar

https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

http://xred.site50.net/syn/SSLLibrary.dll

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b097eb6bcc9eb5f5fd17a77654739e4e186cfe29afa2168ec72a42c2c8e6b004