General

  • Target

    a41fdf8d8ddad785dbec176ffec7f0651f2117f6971b775e4c5460ff22959bec

  • Size

    312KB

  • MD5

    91136ebd37fb7113b78d0c61940b42a0

  • SHA1

    58a2971ab1a29d37c3838ca42915fbfb400462f1

  • SHA256

    a41fdf8d8ddad785dbec176ffec7f0651f2117f6971b775e4c5460ff22959bec

  • SHA512

    a0d88e43f9bebdbeedd2055875c85f6192493e874504012331b0da47c38dad7d9a1875ef1c5ff38848326d2aeec1f65ef27ac83625193ef2283d15123e5398c9

  • SSDEEP

    768:oMuijtHfPN8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGw:BNPpsq+QV4rObAdXWpf/y+G1we8v63

Score
10/10

Malware Config

Extracted

Family

xtremerat

C2

ꬴboubacs2.no-ip.biz

boubacs11.no-ip.biz

boubacs123.no-ip.biz

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • a41fdf8d8ddad785dbec176ffec7f0651f2117f6971b775e4c5460ff22959bec
    .exe windows x86


    Headers

    Sections