General
-
Target
02d2828dd36e7bdd0a8d84c5f35abddc7af06af72e9e4a1db2be61876cb9d4bc
-
Size
33KB
-
Sample
221030-vzftkscgbm
-
MD5
5607f7ca96df604fadfb3a12d587c32e
-
SHA1
024c35bbf81a9d3e35ccb4129931ec58eca0864c
-
SHA256
02d2828dd36e7bdd0a8d84c5f35abddc7af06af72e9e4a1db2be61876cb9d4bc
-
SHA512
af3377c17efcc568c67a0aa1da8720e11b42ccbbf77f2a7a67c13c02cc3085601815383d76d9fafee29d497bab51e27db19350d0b2823cedca04337205510d61
-
SSDEEP
768:rMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66l9IPByP:wNW71rcYDAWeotvXle5
Behavioral task
behavioral1
Sample
02d2828dd36e7bdd0a8d84c5f35abddc7af06af72e9e4a1db2be61876cb9d4bc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
02d2828dd36e7bdd0a8d84c5f35abddc7af06af72e9e4a1db2be61876cb9d4bc.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
xtremerat
pexecabal.no-ip.org
pexecabal.no-ip.org
Targets
-
-
Target
02d2828dd36e7bdd0a8d84c5f35abddc7af06af72e9e4a1db2be61876cb9d4bc
-
Size
33KB
-
MD5
5607f7ca96df604fadfb3a12d587c32e
-
SHA1
024c35bbf81a9d3e35ccb4129931ec58eca0864c
-
SHA256
02d2828dd36e7bdd0a8d84c5f35abddc7af06af72e9e4a1db2be61876cb9d4bc
-
SHA512
af3377c17efcc568c67a0aa1da8720e11b42ccbbf77f2a7a67c13c02cc3085601815383d76d9fafee29d497bab51e27db19350d0b2823cedca04337205510d61
-
SSDEEP
768:rMuijtHf5g7/IIG3bGcYDBSvFIWuePQtv66l9IPByP:wNW71rcYDAWeotvXle5
Score10/10-
Detect XtremeRAT payload
-
XtremeRAT
The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.
-