Overview

overview

10

Static

static

10

2e9fce116a...2c.exe

windows7-x64

10

2e9fce116a...2c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e9fce116afd817d09c721fd131134979a802945f759bb514c626cf2ed1c3e2c

  • Size

    44KB

  • Sample

    221201-k72qxade64

  • MD5

    06f4c83bf76646eb6647e24460313d00

  • SHA1

    c67c7e1d7ff08e97b81712bf6f0ad33174da3a83

  • SHA256

    2e9fce116afd817d09c721fd131134979a802945f759bb514c626cf2ed1c3e2c

  • SHA512

    a99022b3429c2a568fbe8c93ec35df1f352d9e8477299a434fd1a14ca108d4e18c1a95b57aaf9c15502b2ea3a2d6a1c5888610902a783c7c583d3e339e13ae49

  • SSDEEP

    768:rBr+tjFqTPkAl5ztB1lr6an3smTA8uvm2DfOTwYPI2zo+d:FyRUHlBL1lr6an3TLuvm2buQqo+d

Score
10/10
xtremeratpersistenceratspyware

Malware Config

Targets

    • Target

      2e9fce116afd817d09c721fd131134979a802945f759bb514c626cf2ed1c3e2c

    • Size

      44KB

    • MD5

      06f4c83bf76646eb6647e24460313d00

    • SHA1

      c67c7e1d7ff08e97b81712bf6f0ad33174da3a83

    • SHA256

      2e9fce116afd817d09c721fd131134979a802945f759bb514c626cf2ed1c3e2c

    • SHA512

      a99022b3429c2a568fbe8c93ec35df1f352d9e8477299a434fd1a14ca108d4e18c1a95b57aaf9c15502b2ea3a2d6a1c5888610902a783c7c583d3e339e13ae49

    • SSDEEP

      768:rBr+tjFqTPkAl5ztB1lr6an3smTA8uvm2DfOTwYPI2zo+d:FyRUHlBL1lr6an3TLuvm2buQqo+d

    Score
    10/10
    xtremeratpersistenceratspyware

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

      persistencespywareratxtremerat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks