General

  • Target

    3f0b2ee0b825bbdb0c357c5f95f1f2b281fbcca0ebc8ac53ad8dad3631ca2b02.exe

  • Size

    1.9MB

  • Sample

    250116-l35sfavpfs

  • MD5

    40d251bb66d77d99770e4e51fb9fb875

  • SHA1

    e5c4fe65d34c9889cfa3caca2c73846fa87e1192

  • SHA256

    3f0b2ee0b825bbdb0c357c5f95f1f2b281fbcca0ebc8ac53ad8dad3631ca2b02

  • SHA512

    18374e1d06d82ecdef42d7a2b476209388baeab37aeb6ff53489429e10ee20839d795f835f6e05dc294993c7f9b256fce1cc0676daa60ab73807e3699a74e1f8

  • SSDEEP

    49152:0cErhMi/XfMYC5GDxcErhMi/XdnAkheBsMm6zJ+m8Sy0q:92ffaj2fykcaMpsR0q

Score
10/10

Malware Config

Extracted

Family

xred

C2

xred.mooo.com

Attributes
  • email

    [email protected]

  • payload_url

    http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

    https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

    http://xred.site50.net/syn/SUpdate.ini

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

    https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

    http://xred.site50.net/syn/Synaptics.rar

    https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

    https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

    http://xred.site50.net/syn/SSLLibrary.dll

Targets

    • Target

      3f0b2ee0b825bbdb0c357c5f95f1f2b281fbcca0ebc8ac53ad8dad3631ca2b02.exe

    • Size

      1.9MB

    • MD5

      40d251bb66d77d99770e4e51fb9fb875

    • SHA1

      e5c4fe65d34c9889cfa3caca2c73846fa87e1192

    • SHA256

      3f0b2ee0b825bbdb0c357c5f95f1f2b281fbcca0ebc8ac53ad8dad3631ca2b02

    • SHA512

      18374e1d06d82ecdef42d7a2b476209388baeab37aeb6ff53489429e10ee20839d795f835f6e05dc294993c7f9b256fce1cc0676daa60ab73807e3699a74e1f8

    • SSDEEP

      49152:0cErhMi/XfMYC5GDxcErhMi/XdnAkheBsMm6zJ+m8Sy0q:92ffaj2fykcaMpsR0q

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks