xtremerat | 39ca3e07909065911a696117d0f9417c6ec0a7aa1bdf1a53858bae866fe652b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39ca3e07909065911a696117d0f9417c6ec0a7aa1bdf1a53858bae866fe652b0
Size

55KB
MD5

6d0014e727806981b00e5807bdf3cec5
SHA1

63827026ffa048d713029aa0d84b37f7197ca609
SHA256

39ca3e07909065911a696117d0f9417c6ec0a7aa1bdf1a53858bae866fe652b0
SHA512

959bf08c6a2b3a31e9925c463a804f7a59562efa2be484ef56b74f04ff3cad764d03fa7edeee6c24b36d69f16aaecb4d34f2a9053c607b500a98aecff642cce9
SSDEEP

768:KuMAzLqSQ6kwATx94o0IWhWAKp8Ml9ZqgpKeC50euAYfN0bgJzoX:VtLqSQ3w0+rIcKFw4K30MzbsoX

Score

10^/10

xtremerat

Malware Config

Signatures

Detect XtremeRAT payload 1 IoCs

resource	yara_rule
sample	family_xtremerat

Xtremerat family
xtremerat

Files

39ca3e07909065911a696117d0f9417c6ec0a7aa1bdf1a53858bae866fe652b0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 38KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ