xred | 6d991e790d34f8cbeb22f32c36765d1f37c71f6af3e1aea8a5e6edb5f76c4864

General

Target

6d991e790d34f8cbeb22f32c36765d1f37c71f6af3e1aea8a5e6edb5f76c4864
Size

767KB
MD5

0cb593ec7176100fb758a049d63b7f97
SHA1

de06fd4032036df3c7674254f2b16088eacbc1d4
SHA256

6d991e790d34f8cbeb22f32c36765d1f37c71f6af3e1aea8a5e6edb5f76c4864
SHA512

cb3d5a1a28a1e2927b1255e7f2eb014dc070cd052e7455daeb7a3ff541f65b254f6bc8ebc0e56de525c197f503607a2dce7bac824b24588d4afc806c84c0e94c
SSDEEP

12288:2MSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9vFjhj:2nsJ39LyjbJkQFMhmC+6GD9FJ

Score

10^/10

xred

Family

xred

C2

xred.mooo.com

Attributes

email
[email protected]
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

http://xred.site50.net/syn/SUpdate.ini

https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

http://xred.site50.net/syn/Synaptics.rar

https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

http://xred.site50.net/syn/SSLLibrary.dll

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d991e790d34f8cbeb22f32c36765d1f37c71f6af3e1aea8a5e6edb5f76c4864