Overview

overview

10

Static

static

10

63f0972210...16.exe

windows7-x64

10

63f0972210...16.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    63f09722108499d513a674d962ab464759ab5110406a8854cddb76e67ccf8216

  • Size

    44KB

  • Sample

    221107-sy4sxaeab9

  • MD5

    0fa3763b7e5d0f83583a895bfdd2a1fa

  • SHA1

    21ab42e2d7ba9740d19604c55a0f0ad6a0f093a1

  • SHA256

    63f09722108499d513a674d962ab464759ab5110406a8854cddb76e67ccf8216

  • SHA512

    8fc8cd1ee930dc8e3766bb150b98853524f39ba67aaa96bb25f16adff83b34aabca589ab64bfd3b0c9fba7a9db9eaf9935bb95b7cec7cbbf96773439e9e00624

  • SSDEEP

    768:rBr+tjFqTPkAlmztB1lr6an3smTA8uvm2DfOTwYPIHzoQJ:FyRUHlcL1lr6an3TLuvm2buQToQJ

Score
10/10
xtremeratpersistenceratspyware

Malware Config

Targets

    • Target

      63f09722108499d513a674d962ab464759ab5110406a8854cddb76e67ccf8216

    • Size

      44KB

    • MD5

      0fa3763b7e5d0f83583a895bfdd2a1fa

    • SHA1

      21ab42e2d7ba9740d19604c55a0f0ad6a0f093a1

    • SHA256

      63f09722108499d513a674d962ab464759ab5110406a8854cddb76e67ccf8216

    • SHA512

      8fc8cd1ee930dc8e3766bb150b98853524f39ba67aaa96bb25f16adff83b34aabca589ab64bfd3b0c9fba7a9db9eaf9935bb95b7cec7cbbf96773439e9e00624

    • SSDEEP

      768:rBr+tjFqTPkAlmztB1lr6an3smTA8uvm2DfOTwYPIHzoQJ:FyRUHlcL1lr6an3TLuvm2buQToQJ

    Score
    10/10
    xtremeratpersistenceratspyware

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks