xtremerat | 969c5cb775629254334715f1259efc364d5a1d960f51c9b3356607cb7f687586 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

969c5cb775629254334715f1259efc364d5a1d960f51c9b3356607cb7f687586
Size

52KB
MD5

0c5177b6f8165bf2a829e362cb735e16
SHA1

83e8e4ed2b703ac1d15abe3642f777b37c05560b
SHA256

969c5cb775629254334715f1259efc364d5a1d960f51c9b3356607cb7f687586
SHA512

e24dfb13893f1895960e474d3d7042437f49516c8dba9a6e62eed9d5d3b39ae2e2954e05dcf90300555777686cc5080faf6af55c9982662d9358ac617afc07e4
SSDEEP

768:5Wc9quCDQyTZsnw0bCdovh1oMbFoUHS2NfcKAS7diSHT:Uc9quCDQTwM9By25uc

Score

10^/10

xtremerat

Malware Config

Signatures

Detect XtremeRAT payload 1 IoCs

resource	yara_rule
sample	family_xtremerat

Xtremerat family
xtremerat

Files

969c5cb775629254334715f1259efc364d5a1d960f51c9b3356607cb7f687586
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 203KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ