General

  • Target

    ef527a7eedf2d1f37e3d5ba3e7086f2792976758d53dde97fd1ff22ef4466d6b

  • Size

    753KB

  • Sample

    250128-fh6w4sxpe1

  • MD5

    7bf60d0faab7db34cc22e9f83e40641c

  • SHA1

    e30c0ba11379505cb7d6175adb4a89ad4840ca39

  • SHA256

    ef527a7eedf2d1f37e3d5ba3e7086f2792976758d53dde97fd1ff22ef4466d6b

  • SHA512

    d3ecc04074f067800055a7ddadc7702b5325ddb6335203bb7308cb1ebd6ae50cd13b8f66fca4104f1ed0b6e9caa597cd294cc48b81c1a356b8b8d149d7034bb7

  • SSDEEP

    12288:uMSApJ5YG5lMCjrbLeOZBv4R7QR/+cZQ9r:unsJ7iCjjzBQF6/+z

Score
10/10

Malware Config

Extracted

Family

xred

C2

xred.mooo.com

Attributes
  • email

    [email protected]

  • payload_url

    http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

    https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

    http://xred.site50.net/syn/SUpdate.ini

    https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

    https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

    http://xred.site50.net/syn/Synaptics.rar

    https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

    https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

    http://xred.site50.net/syn/SSLLibrary.dll

Targets

    • Target

      ef527a7eedf2d1f37e3d5ba3e7086f2792976758d53dde97fd1ff22ef4466d6b

    • Size

      753KB

    • MD5

      7bf60d0faab7db34cc22e9f83e40641c

    • SHA1

      e30c0ba11379505cb7d6175adb4a89ad4840ca39

    • SHA256

      ef527a7eedf2d1f37e3d5ba3e7086f2792976758d53dde97fd1ff22ef4466d6b

    • SHA512

      d3ecc04074f067800055a7ddadc7702b5325ddb6335203bb7308cb1ebd6ae50cd13b8f66fca4104f1ed0b6e9caa597cd294cc48b81c1a356b8b8d149d7034bb7

    • SSDEEP

      12288:uMSApJ5YG5lMCjrbLeOZBv4R7QR/+cZQ9r:unsJ7iCjjzBQF6/+z

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks