General
- Target 81c62d9492c2154103b9c4c0f1ef7c93c37e3f110e17cc3d6f7351c3e86dde99
- Size 655KB
- Sample260825-g9cb9atwex
- SHA256 81c62d9492c2154103b9c4c0f1ef7c93c37e3f110e17cc3d6f7351c3e86dde99
- MD5 0605a7746f2c1f780521a87de5986476
- SHA1 32a411a5bf11a261070ce0d243de2b5e42466713
- SHA512 03a1aec41703965c52cb02cc9ede2d6d4784cecf32783bcf71af4a367f99834100833e8187a56f32012eeab28dadabaca48f91b5a5606f456e0418fcd04272e8
- SSDEEP 12288:2n8FvHN9U6ZqNS1HtrmR06nT7IGoChzk51MOZ/+/KhzMalR:2nizBqutr206T7b9Nk5So/9r
- TLSH T1DAE423364877CCE76ED2126FEEC411B0901DAF9B4AD5FC840FA76D4E64BCAA1E045493
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
键盘错乱点我.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
键盘错乱点我.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Extracted
-
xred
-
xred.mooo.com
-
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1
http://xred.site50.net/syn/SUpdate.ini
https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1
http://xred.site50.net/syn/Synaptics.rar
https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1
http://xred.site50.net/syn/SSLLibrary.dll
Targets
-
- Target 键盘错乱点我.exe
- Size 1.0MB
- SHA256 020cbe4e059c673679692ab583a74476f353ca5112416f3380e16feaca04b7de
- MD5 4e1307c0c7dfdd16b0bfc67ffea39545
- SHA1 d0ba1889474cbb62aeaf274f24f4261a58809d59
- SHA512 30a7afce9f52371efabf832289644eb2579c9489b3aacf9e127ae5ed7cf27bfd2f65a9ec28da52c8a835fdbcfe654afa2aed33c8e5fbb37492023ef950b2e292
- SSDEEP 24576:ansJ39LyjbJkQFMhmC+6GD9/FE//Tct4bOsvL+:ansHyjtk2MYC5GDnSVT+
- TLSH T12925AF32F2D18477D1721A3D9C5BA3A4582ABE512E34794E7BF81E4C5F3E68238252D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Adds Run key to start application