General
- Target 3131dcca773e481bda4700b7707cb9cacf14c5bac1d210799076286fa133813f
- Size 8.0MB
- Sample260910-pdwd9awwf1
- SHA256 3131dcca773e481bda4700b7707cb9cacf14c5bac1d210799076286fa133813f
- MD5 a5d866b106a2ff7311934d8a6f0fe23d
- SHA1 3ad69fe35a7308c6d14f8e4193aea41c4a1ad95e
- SHA512 ecccfa8c2d79b5a1388b0b966e8334988422d6c47662689be9e9d6de03987a8f5fbb96fc5a0fe4ed00a48e0dde6143145d2108dc72bc60c4d83af6116bf90895
- SSDEEP 196608:2LmLMLPLlbEhZ0jJa/NSNywCqeKtFCDqVNV:2SoD57jaoNywPS2NV
- TLSH T12386F133F6D18437D1321A7C9C6B93A9683ABE512E34794B3BF51E4C5E3928238642D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
3131dcca773e481bda4700b7707cb9cacf14c5bac1d210799076286fa133813f.exe
Resource
win10v2004-20260513-en
Malware Config
Extracted
-
xred
-
xred.mooo.com
-
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1
http://xred.site50.net/syn/SUpdate.ini
https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1
http://xred.site50.net/syn/Synaptics.rar
https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1
http://xred.site50.net/syn/SSLLibrary.dll
Targets
-
- Target 3131dcca773e481bda4700b7707cb9cacf14c5bac1d210799076286fa133813f
- Size 8.0MB
- SHA256 3131dcca773e481bda4700b7707cb9cacf14c5bac1d210799076286fa133813f
- MD5 a5d866b106a2ff7311934d8a6f0fe23d
- SHA1 3ad69fe35a7308c6d14f8e4193aea41c4a1ad95e
- SHA512 ecccfa8c2d79b5a1388b0b966e8334988422d6c47662689be9e9d6de03987a8f5fbb96fc5a0fe4ed00a48e0dde6143145d2108dc72bc60c4d83af6116bf90895
- SSDEEP 196608:2LmLMLPLlbEhZ0jJa/NSNywCqeKtFCDqVNV:2SoD57jaoNywPS2NV
- TLSH T12386F133F6D18437D1321A7C9C6B93A9683ABE512E34794B3BF51E4C5E3928238642D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10