Extracted

• • Target

    a35c6b265017539633b62e20bbd585ff895bde7af5f5765581192ef31f69b2e1

  • Size

    45KB

  • MD5

    a03e161f2e432916d40055a094fe2570

  • SHA1

    f7e7bd9812164e5050232b9a6d41680b61681b57

  • SHA256

    a35c6b265017539633b62e20bbd585ff895bde7af5f5765581192ef31f69b2e1

  • SHA512

    b0ee6e530018aa6863e922af96bdea299268b3025072adb5f9ae6901a387576f5da55372ae84acc98f4c623227fd3f557f9f14019ff570b01fd8c5f3a0d83b22

  • SSDEEP

    768:9Br+tjFY90iY6W1jwmDzKgEFQXaklMIAnH8hwfOgw0cWzoCO:jyRh31jxPEFQXak+H84bfoCO

  Score

  10^/10

  xtremeratpersistenceratspyware

  • Detect XtremeRAT payload

  • XtremeRAT

    The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    persistencespywareratxtremerat

  • Modifies Installed Components in the registry

    persistence

  • Adds Run key to start application

    persistence
  behavioral1behavioral2