xtremerat | e7f3be66d4437aebbff44d05555360a713f8cf10dd275f7b6bc738a49ce0d0af | Triage

Sharing

General

Target

e7f3be66d4437aebbff44d05555360a713f8cf10dd275f7b6bc738a49ce0d0af
Size

65KB
MD5

09834fdaf6f745a98fa78ff956fe8beb
SHA1

66b17f2f03c60714600396bce669055269b3778b
SHA256

e7f3be66d4437aebbff44d05555360a713f8cf10dd275f7b6bc738a49ce0d0af
SHA512

16a19ce4a84d7bfaa0fb0ca731a1e38883c168f913d500d21c5b52ce7ed7c91ed460f1637f5b3f62e442f85fc12697033fde5e9b9c44fed03c6609c7b7a12eb5
SSDEEP

768:i8m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7Xo3:Qsq+QV4rObAdXWpf/y+7ozNwi0oNZ

Score

10^/10

xtremerat

Malware Config

Signatures

Detect XtremeRAT payload 1 IoCs

resource	yara_rule
sample	family_xtremerat

Xtremerat family
xtremerat

Files

e7f3be66d4437aebbff44d05555360a713f8cf10dd275f7b6bc738a49ce0d0af
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 208KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ