xred | 2025-02-26_9d88a373d6ff2dcf51948217c9167dd4_darkgate_magniber

General

Target

2025-02-26_9d88a373d6ff2dcf51948217c9167dd4_darkgate_magniber
Size

6.0MB
MD5

9d88a373d6ff2dcf51948217c9167dd4
SHA1

357eda64eef4bef65a5a55fac853c9538f3a3843
SHA256

871da8e6934fbd9c483be4bfa61c2830bb54b6d0fbfe89dd88924e40c40c7f58
SHA512

911592b5e9c2606dc87d1fc27b5370ec310e01f089bf96e4c5df3c2e18a9d35e764381a6142576494a178c6451cd2bb53d093c70a9d0bc55fe7a3625d71b17a8
SSDEEP

98304:Hnsmtk2a3UAtqwFEV16GtyKwdeQgrnZSQFkB6ZsYUnrro+W4E:HLU2WGtyKw7YZSpMaYUnP4X

Score

10^/10

xred

Family

xred

C2

xred.mooo.com

Attributes

email
[email protected]
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

http://xred.site50.net/syn/SUpdate.ini

https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

http://xred.site50.net/syn/Synaptics.rar

https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

http://xred.site50.net/syn/SSLLibrary.dll

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-02-26_9d88a373d6ff2dcf51948217c9167dd4_darkgate_magniber