xtremerat | 61abda07beb34af697650b436d012d2f1965c00f962b42fbb6e88b00170d941e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61abda07beb34af697650b436d012d2f1965c00f962b42fbb6e88b00170d941e
Size

45KB
MD5

aa9c2e6f71e66e22f37aeb73c061c72c
SHA1

dfd689f56c6fa02177602c65d276e2bdf579d806
SHA256

61abda07beb34af697650b436d012d2f1965c00f962b42fbb6e88b00170d941e
SHA512

5ec50b3412972173fee05eda44ae51502c8ec55b184b4db1cc131a24b127c07063f88cb05e18612efebb974cece2c6780aa103b2f0a16973dc217b682942b383
SSDEEP

768:9BL+tjFY90iY6W1jApDzKgEFQXaklMIAnH8hwfOgw08pzo5J:jSRh31jqPEFQXak+H84bso5J

Score

10^/10

xtremerat

Malware Config

Signatures

Detect XtremeRAT payload 1 IoCs

resource	yara_rule
sample	family_xtremerat

Xtremerat family
xtremerat

Files

61abda07beb34af697650b436d012d2f1965c00f962b42fbb6e88b00170d941e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ