xred | bf5af2ea08413353edb66afbcdbf2cd4b99ac148c9360b784895a9e9bbc44cdd

General

Target

bf5af2ea08413353edb66afbcdbf2cd4b99ac148c9360b784895a9e9bbc44cdd
Size

959KB
MD5

666988e7b77645d3bb336ac1172a0f68
SHA1

57b059a71dcc830ae9321f45df49553905673b81
SHA256

bf5af2ea08413353edb66afbcdbf2cd4b99ac148c9360b784895a9e9bbc44cdd
SHA512

6f07956b4427ad30f309ea839c05238ff0ef6a0b42bbc6015b28b94b57b8abcd8d76f126139127ade1f9ccf312060034b2bdeecf1290bf48c01b1c88caef6262
SSDEEP

12288:6MSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V94Ht6WvPOglY:6nsJ39LyjbJkQFMhmC+6GD9aJf2

Score

10^/10

xred

Family

xred

C2

xred.mooo.com

Attributes

email
[email protected]
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

http://xred.site50.net/syn/SUpdate.ini

https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

http://xred.site50.net/syn/Synaptics.rar

https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

http://xred.site50.net/syn/SSLLibrary.dll

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf5af2ea08413353edb66afbcdbf2cd4b99ac148c9360b784895a9e9bbc44cdd