General
-
Target
41cfa76bcff3a102ec482ac4e5a30773bc519deb3a8071198bb002ac6f76ab95
-
Size
31KB
-
Sample
221002-sbev9sdaej
-
MD5
704490329d083fd4fcbb96a9ae37f9ab
-
SHA1
bcef003db4369861732e976467e2db124ebbaea6
-
SHA256
41cfa76bcff3a102ec482ac4e5a30773bc519deb3a8071198bb002ac6f76ab95
-
SHA512
bb8a9717a1ab7a4d0c5f6772d325a24db051db0c9072d6bccfc36604a7f572f37852691c252ba2785e0e3de9331750c9129ecb8727494cac05ad9ed30274429b
-
SSDEEP
768:wsuijtHf5g7/MjN3Ha4LWqY+5cpSMuRRRzv4/+5jTiGWJcd:ZNW70x6ALBwsd
Behavioral task
behavioral1
Sample
41cfa76bcff3a102ec482ac4e5a30773bc519deb3a8071198bb002ac6f76ab95.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
41cfa76bcff3a102ec482ac4e5a30773bc519deb3a8071198bb002ac6f76ab95.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
xtremerat
h3r0.no-ip.org
Targets
-
-
Target
41cfa76bcff3a102ec482ac4e5a30773bc519deb3a8071198bb002ac6f76ab95
-
Size
31KB
-
MD5
704490329d083fd4fcbb96a9ae37f9ab
-
SHA1
bcef003db4369861732e976467e2db124ebbaea6
-
SHA256
41cfa76bcff3a102ec482ac4e5a30773bc519deb3a8071198bb002ac6f76ab95
-
SHA512
bb8a9717a1ab7a4d0c5f6772d325a24db051db0c9072d6bccfc36604a7f572f37852691c252ba2785e0e3de9331750c9129ecb8727494cac05ad9ed30274429b
-
SSDEEP
768:wsuijtHf5g7/MjN3Ha4LWqY+5cpSMuRRRzv4/+5jTiGWJcd:ZNW70x6ALBwsd
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-